r Commands – Part II

Context

[Tree] (config>service>vprn>if redirects)

[Tree] (config>service>vprn>if>icmp redirects)

[Tree] (config>service>ies>if>icmp redirects)

[Tree] (config>service>ies>sub-if>grp-if>icmp redirects)

[Tree] (config>service>ies>if>ipv6>icmp6 redirects)

[Tree] (config>service>vprn>if>ipv6>icmp6 redirects)

[Tree] (config>service>vprn>nw-if>icmp redirects)

Full Context

configure service vprn interface redirects

configure service vprn interface icmp redirects

configure service ies interface icmp redirects

configure service ies subscriber-interface group-interface icmp redirects

configure service ies interface ipv6 icmp6 redirects

configure service vprn interface ipv6 icmp6 redirects

configure service vprn network-interface icmp redirects

Description

This command configures the rate for Internet Control Message Protocol (ICMP) redirect messages issued on the router interface.

When routes are not optimal on this router and another router on the same subnetwork has a better route, the router can issue an ICMP redirect to alert the sending node that a better route is available.

The redirects command enables the generation of ICMP redirects on the router interface. The rate at which ICMP redirects is issued can be controlled with the optional number and seconds parameters by indicating the maximum number of redirect messages that can be issued on the interface for a given time interval.

The no form of this command disables the generation of ICMP redirects on the router interface.

Default

redirects 100 10

Parameters

number

Specifies the maximum number of ICMP redirect messages to send. This parameter must be specified with the second parameter.

Values

10 to 1000

seconds

Specifies the time frame in seconds used to limit the number of ICMP redirect messages that can be issued.

Values

1 to 60

Platforms

All

• configure service vprn interface redirects
• configure service ies interface ipv6 icmp6 redirects
• configure service ies interface icmp redirects
• configure service vprn interface icmp redirects
• configure service vprn network-interface icmp redirects
• configure service vprn interface ipv6 icmp6 redirects

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service ies subscriber-interface group-interface icmp redirects

Context

[Tree] (config>subscr-mgmt>git>ipv4>icmp redirects)

Full Context

configure subscriber-mgmt group-interface-template ipv4 icmp redirects

Description

This command configures the ICMPv4 redirect messages that are generated when routes are not optimal on the router and the node needs to be alerted that another router on the same subnetwork has a better route available.

When disabled, ICMPv4 redirects are not generated.

The no form of this command disables generation of redirect messages.

Default

redirects number 100 seconds 10

Parameters

number

Specifies the number of ICMPv4 redirects that are issued in the time frame specified by the seconds parameter.

Values

10 to 1000

Default

100

seconds

Specifies the time, in seconds, that is used to limit the number of ICMPv4 redirects issued.

Values

1 to 60

Default

10

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if>icmp redirects)

Full Context

configure router interface icmp redirects

Description

This command enables and configures the rate for ICMP redirect messages issued on the router interface.

When routes are not optimal on this router, and another router on the same subnetwork has a better route, the router can issue an ICMP redirect to alert the sending node that a better route is available.

The redirects command enables the generation of ICMP redirects on the router interface. The rate at which ICMP redirects are issued can be controlled with the optional number and time parameters by indicating the maximum number of redirect messages that can be issued on the interface for a given time interval.

By default, generation of ICMP redirect messages is enabled at a maximum rate of 100 per 10 second time interval.

The no form of this command disables the generation of ICMP redirects on the router interface.

Default

redirects 100 10 — Maximum of 100 redirect messages in 10 seconds.

Parameters

number

The maximum number of ICMP redirect messages to send, expressed as a decimal integer. This parameter must be specified with the time parameter.

Values

10 to 1000

seconds

The time frame, in seconds, used to limit the number of ICMP redirect messages that can be issued, expressed as a decimal integer.

Values

1 to 60

Platforms

All

Context

[Tree] (config>router>if>ipv6>icmp6 redirects)

Full Context

configure router interface ipv6 icmp6 redirects

Description

This command configures the rate for ICMPv6 redirect messages. When configured, ICMPv6 redirects are generated when routes are not optimal on the router and another router on the same subnetwork has a better route to alert that node that a better route is available.

The no form of this command disables ICMPv6 redirects.

Default

redirects 100 10 (when IPv6 is enabled on the interface)

Parameters

number

Limits the number of redirects issued per the time frame specified in seconds parameter.

Values

10 to 1000

seconds

Determines the time frame, in seconds, that is used to limit the number of redirects issued per time frame.

Values

1 to 60

Platforms

All

Context

[Tree] (config>router>ospf3>timers redistribute-delay)

[Tree] (config>router>ospf>timers redistribute-delay)

Full Context

configure router ospf3 timers redistribute-delay

configure router ospf timers redistribute-delay

Description

This command sets the internal OSPF hold down timer for external routes being redistributed into OSPF.

Shorting this delay can speed up the advertisement of external routes into OSPF but can result in additional OSPF messages if that source route is not yet stable.

The no form of this command resets the timer value back to the default value.

Default

redistribute-delay 1000

Parameters

redistribute-delay

Specifies the OSPF redistribution hold down time in milliseconds for external routes being advertised into OSPF.

Values

0 to 1000

Platforms

All

Context

[Tree] (config>service>vprn>ospf>area>nssa redistribute-external)

[Tree] (config>service>vprn>ospf3>area>nssa redistribute-external)

Full Context

configure service vprn ospf area nssa redistribute-external

configure service vprn ospf3 area nssa redistribute-external

Description

This command enables the redistribution of external routes into the Not So Stubby Area (NSSA) or an NSSA area border router (ABR) that is exporting the routes into non-NSSA areas.

NSSA or Not So Stubby Areas are similar to stub areas in that no external routes are imported into the area from other OSPF areas. The major difference between a stub area and an NSSA is that the NSSA has the capability to flood external routes that it learns (providing it is an ASBR) throughout its area and via an ABR to the entire OSPF domain.

The no form of this command disables the default behavior to automatically redistribute external routes into the NSSA area from the NSSA ABR.

Default

redistribute-external — External routes are redistributed into the NSSA.

Platforms

All

Context

[Tree] (config>router>ospf>area>nssa redistribute-external)

[Tree] (config>router>ospf3>area>nssa redistribute-external)

Full Context

configure router ospf area nssa redistribute-external

configure router ospf3 area nssa redistribute-external

Description

This command enables the redistribution of external routes into the Not So Stubby Area (NSSA) or an NSSA area border router (ABR) that is exporting the routes into non-NSSA areas.

NSSA or Not So Stubby Areas are similar to stub areas in that no external routes are imported into the area from other OSPF or OSPF3 areas. The major difference between a stub area and an NSSA is that the NSSA has the capability to flood external routes that it learns (providing it is an ASBR) throughout its area and via an Area Border Router to the entire OSPF or OSPF3 domain.

The no form of this command disables the default behavior to automatically redistribute external routes into the NSSA area from the NSSA ABR.

Default

redistribute-external

Platforms

All

Context

[Tree] (candidate redo)

Full Context

candidate redo

Description

This command reapplies the changes to the candidate that were removed using a previous undo. All undo or redo history is lost when the operator exits edit-cfg mode.

A redo command is blocked if another user has made changes in the same CLI branches that would be impacted during the redo.

Parameters

count

Specifies the number of previous changes to reapply.

Values

1 to 50

Default

1

Platforms

All

Context

[Tree] (environment reduced-prompt)

Full Context

environment reduced-prompt

Description

This command configures the maximum number of higher CLI context levels to display in the CLI prompt for the current CLI session. This command is useful when configuring features that are several node levels deep, causing the CLI prompt to become too long. By default, the CLI prompt displays the system name and the complete context in the CLI.

The number of nodes specified indicates the number of higher-level contexts that can be displayed in the prompt. For example, if reduced prompt is set to 2, the two highest contexts from the present working context are displayed by name with the hidden (reduced) contexts compressed into a ellipsis ("…”).

A:ALA-1>environment# reduced-prompt 2
A:ALA-1>config>router# interface to-103
A:ALA-1>...router>if#

The setting is not saved in the configuration. It must be reset for each CLI session or stored in an exec script file.

The no form of the command reverts to the default.

Default

no reduced-prompt

Parameters

no-of-nodes-in-prompt

Specifies the maximum number of higher-level nodes displayed by name in the prompt, expressed as a decimal integer.

Values

0 to 15

Default

2

Platforms

All

Context

[Tree] (config redundancy)

Full Context

configure redundancy

Description

This command allows the user to perform redundancy operations.

Associated commands include the following in the admin>redundancy context:

• force-switchover - Forces a switchover to the standby CPM card.

• now - Switch to standby CPM.

  Switching to the standby displays the following message.

  WARNING: Configuration and/or Boot options may have changed since the last save.

  Are you sure you want to switchover (y/n)?

• synchronize - Synchronizes the secondary CPM.

Platforms

All

Context

[Tree] (admin redundancy)

Full Context

admin redundancy

Description

Commands in this context allow the user to perform redundancy operations.

Platforms

All

Context

[Tree] (config>service>ies>sub-if>wlan-gw redundancy)

Full Context

configure service ies subscriber-interface wlan-gw redundancy

Description

Commands in this context configure WLAN-GW redundancy-related parameters.

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>nat>inside redundancy)

[Tree] (config>service>vprn>nat>outside>pool redundancy)

[Tree] (config>router>nat>inside redundancy)

Full Context

configure service vprn nat inside redundancy

configure service vprn nat outside pool redundancy

configure router nat inside redundancy

Description

Commands in this context configure redundancy parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>isa>nat-group redundancy)

Full Context

configure isa nat-group redundancy

Description

This command configures intra-chassis redundancy mode for the NAT group.

Default

redundancy active-standby

Parameters

active-active

Specifies the mode in which all MS-ISAs in a NAT group are active. If one or two MS-ISAs in the system fail, the remaining active MS-ISA accepts the load from the failed MS-ISAs.

active-standby

Specifies the mode in which one or more MS-ISAs in the NAT group are in standby mode. While in standby mode, MS-ISAs do not process traffic. Traffic is diverted to the standby MS-ISA only when the active MS-ISA fails, at which point the standby becomes active.

l2-aware-bypass

Specifies that when an ISA MDA fails, NAT reroutes its traffic based on the regular destination address lookup. This resiliency mode is applicable only to L2-Aware NAT. When the MS-ISA fails, its traffic is routed via regular routing (destination-based lookup). The assumption is that traffic is sent to an external NAT device that serves as a backup NAT device.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>nat>outside>pool redundancy)

Full Context

configure router nat outside pool redundancy

Description

Commands in this context configure NAT pool redundancy parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>eth-cfm redundancy)

Full Context

configure eth-cfm redundancy

Description

Commands in this context configure the ETH-CFM redundancy parameters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>sub-if>grp-if redundant-interface)

[Tree] (config>service>vprn>sub-if>grp-if redundant-interface)

Full Context

configure service ies subscriber-interface group-interface redundant-interface

configure service vprn subscriber-interface group-interface redundant-interface

Description

This command configures a redundant interface used for dual homing.

Parameters

red-ip-int-name

Specifies the redundant IP interface name.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies redundant-interface)

[Tree] (config>service>vprn redundant-interface)

Full Context

configure service ies redundant-interface

configure service vprn redundant-interface

Description

This command configures a redundant interface.

Parameters

ip-int-name

Specifies the name of the IP interface. Interface names can be from 1 to 32 alphanumeric characters. If the string contains special characters (#, ?, space), the entire string must be enclosed within double quotes.

create

Keyword used to create a redundant interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>up-resiliency>fsg-template redundant-interface)

Full Context

configure subscriber-mgmt up-resiliency fate-sharing-group-template redundant-interface

Description

This command configures downstream traffic shunting from a standby BNG-UP to an active BNG-UP. Downstream traffic that is received for standby sessions is sent over the redundant interface to the active BNG-UP. This requires the configuration of the multi-chassis-shunt-id command in the service that receives the session traffic.

The noform of the command removes the configuration.

Parameters

service-id

Specifies the name of the VPRN or IES service that contains the redundant interface, up to 64 characters. This can be different from the service where session traffic is terminated.

interface-name

Specifies the redundant interface name, up to 32 characters. It must exist within the configured service-id.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>mcast-mgmt>chassis-level>plane-capacity redundant-mcast-capacity)

Full Context

configure mcast-management chassis-level per-mcast-plane-capacity redundant-mcast-capacity

Description

This command configures the primary and secondary multicast plane capacities used when the full complement of possible switch fabrics in the system are up. The rates are defined as a percentage of the total multicast plane capacity which is configured using the total-capacity command.

The no form of this command reverts to the default values.

Default

redundant-mcast-capacity 87.50 secondary 87.50

Parameters

primary-percentage

Specifies the percentage of the total multicast plane capacity to be used for primary multicast planes.

Values

0.01 to 100

secondary-percentage

Specifies the percentage of the total multicast plane capacity to be used for secondary multicast planes.

Values

0.01 to 100

Platforms

7450 ESS, 7750 SR-1x-48D, 7750 SR-1x-92S, 7750 SR-7/12/12e, 7750 SR-s, 7950 XRS, VSR

Context

[Tree] (config>router>igmp>if redundant-multicast)

Full Context

configure router igmp interface redundant-multicast

Description

This command configures the interface as a member of a redundant pair for multicast traffic.

The no form of the command removes the configuration.

Platforms

All

Context

[Tree] (config>log>acct-policy>cr ref-aa-specific-counter)

Full Context

configure log accounting-policy custom-record ref-aa-specific-counter

Description

This command enables the use of significant-change so only those aa-specific records which have changed in the last accounting interval are written.

The no form of this command disables the use of significant-change so all aa-specific records are written whether or not they have changed within the last accounting interval.

Parameters

any

Indicates that a record is collected as long as any field records activity when non-zero significant-change value is configured.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>system>sync-if-timing ref-order)

Full Context

configure system sync-if-timing ref-order

Description

The synchronous equipment timing subsystem can lock to different timing reference inputs, those specified in the ref1, ref2, bits, synce, and ptp command configuration. This command organizes the priority order of the timing references.

If a reference source is disabled, then the clock from the next reference source as defined by ref-order is used. If all reference sources are disabled, then clocking is derived from a local oscillator.

If a sync-if-timing reference is linked to a source port that is operationally down, the port is no longer qualified as a valid reference.

For 7450 ESS and 7750 SR systems with two CPM modules, the system distinguishes between the BITS inputs on the active and standby CPMs. The active CPM will use its BITS input port providing that port is qualified. If the local port is not qualified, then the active CPM will use the BITS input port from the standby CPM as the next priority reference. For example, the normal ref-order of bits ref1 ref2 will actually be bits (active CPM), followed by bits (standby CPM), followed by ref1, followed by ref2.

For 7950 XRS systems with two CPMs and two CCMs, the system distinguishes between the BITS inputs on the CCMs associated with the active and standby CPMs. The active CPM will use the BITS input port on the associated CCM, provided that the port is qualified. If the local port is not qualified, then the active CPM will use the BITS input port from the CCM associated with the standby CPM as the next priority reference. For example, the normal ref-order of bits ref1 ref2 will actually be bits (active CCM), followed by bits (standby CCM), followed by ref1, followed by ref2.

The no form of the command resets the reference order to the default values.

The SyncE/1588 port of the CPM or CCM can be used as a frequency input reference. It shares internal resources with the BITS input ports and so only one can be used at a time. The BITS port shall have priority, if BITS input is enabled, then the SyncE port cannot be enabled.

Similar to the BITS input ports, when the synce reference is enabled and in the ref-order, the system distinguishes between the synce inputs on the active and standby CPM/CCMs. The active CPM/CCM uses its synce input port if that port is qualified. If the local port is not qualified, the active CPM uses the synce input port from the standby CPM/CCM as the next priority reference. For example, the ref-order of synce ref1 ref2 will actually be synce (active CPM/CCM), followed by synce (standby CPM/CCM), followed by ref1, followed by ref2.

Default

bits synce ref1 ref2 ptp (7750 SR-7/12/12e with CPM-5, 7950 XRS-20/20e, SR-7s/14s, and 7450 ESS-7/12)

bits ref1 ref2 ptp (7750 SR-a4/8, SR-1e/2e/3e, SR-1, SR-1s/2s)

Parameters

first

Specifies the first timing reference to use in the reference order sequence.

Values

bits, synce, ref1, ref2, ptp

second

Specifies the second timing reference to use in the reference order sequence.

Values

bits, synce, ref1, ref2, ptp

third

Specifies the third timing reference to use in the reference order sequence.

Values

bits, synce, ref1, ref2, ptp

fourth

Specifies the fourth timing reference to use in the reference order sequence.

Values

bits, synce, ref1, ref2, ptp

fifth

Specifies the fifth timing reference to use in the reference order sequence.

Values

bits, synce, ref1, ref2, ptp

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>log>acct-policy>cr ref-policer)

Full Context

configure log accounting-policy custom-record ref-policer

Description

This command creates a policer context to configure reference policer counters for significant change only reporting. The custom record is only generated when the change in the sum of all queue and policer reference counters equals or exceeds the configured (non-zero) significant change value.

The no form of this command deletes all policer reference counters.

Default

no ref-policer

Parameters

policer-id

Specifies the policer for which reference counters are configured and to which significant-change is applied.

Values

1 to 63

all

Applies the significant-change to the specified counters for all policers.

Platforms

All

Context

[Tree] (config>subscr-mgmt>acct-plcy>cr ref-queue)

Full Context

configure subscriber-mgmt radius-accounting-policy custom-record ref-queue

Description

This command configures a reference queue.

The no form of this command reverts to the default value.

Parameters

queue-id

Specifies the reference queue ID.

Values

1 to 32

all

Includes all reference queue IDs.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>log>acct-policy>cr ref-queue)

Full Context

configure log accounting-policy custom-record ref-queue

Description

This command creates a queue context to configure reference queue counters for significant change only reporting. The custom record is only generated when the change in the sum of all queue and policer reference counters equals or exceeds the configured (non-zero) significant change value.

The no form of this command deletes all queue reference counters.

Default

no ref-queue

Parameters

queue-id

Specifies the queue for which reference counters are configured and to which the significant-change is applied.

Values

1 to 32

all

Applies the significant-change to the specified counters for all queues.

Platforms

All

Context

[Tree] (config>system>sync-if-timing ref1)

Full Context

configure system sync-if-timing ref1

Description

Commands in this context configure parameters for the first timing reference.

The restrictions on the location for the source port or source bits for ref1 and ref2 are listed in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Basic System Configuration Guide.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (conf>sys>sat>eth-sat>sync-if-timing ref1)

Full Context

configure system satellite eth-sat sync-if-timing ref1

Description

Commands in this context configure parameters for the first timing reference used in the ethernet satellite.

The source ports for ref1 can be either uplinks or client ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>sync-if-timing ref2)

Full Context

configure system sync-if-timing ref2

Description

Commands in this context configure parameters for the second timing reference. There are restrictions on the source-port and source-bits locations for ref2 based on the platform. The restrictions on the location for the source-port or source-bits for ref1 and ref2 are listed in the 7450 ESS, 7750 SR, 7950 XRS, and VSR Basic System Configuration Guide.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (conf>sys>sat>eth-sat>sync-if-timing ref2)

Full Context

configure system satellite eth-sat sync-if-timing ref2

Description

Commands in this context configure parameters for the second timing reference used in the ethernet satellite.

The source ports for ref2 can be either uplinks or client ports.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>vprn>isis reference-bandwidth)

Full Context

configure service vprn isis reference-bandwidth

Description

This command configures the reference bandwidth that provides the basis of bandwidth relative costing.

In order to calculate the lowest cost to reach a specific destination, each configured level on each interface must have a cost. If the reference bandwidth is defined, then the cost is calculated using the following formula:

cost = reference – bandwidth  bandwidth

If the reference bandwidth is configured as 10 Gigabits (10,000,000,000), a 100 M/bps interface has a default metric of 100. In order for metrics in excess of 63 to be configured, wide metrics must be deployed. (See wide-metrics-only in the config>router>isis context.)

If the reference bandwidth is not configured, all interfaces have a default metric of 10.

The no form of this command reverts to the default value.

Default

no reference-bandwidth — No reference bandwidth is defined. All interfaces have a metric of 10.

Parameters

Zetta-bps

Specifies the reference bandwidth in zettabits per second, expressed as a decimal integer.

Values

1 to 18

Exa-bps

Specifies the reference bandwidth in exabits per second, expressed as a decimal integer.

Values

1 to 999

Peta-bps

Specifies the reference bandwidth in petabits per second, expressed as a decimal integer.

Values

1 to 999

bandwidth-in-kbps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 18446744073709551615

Tera-bps

Specifies the reference bandwidth in terabits per second, expressed as a decimal integer.

Values

1 to 999

Giga-bps

Specifies the reference bandwidth in gigabits per second, expressed as a decimal integer.

Values

1 to 999

Mega-bps

Specifies the reference bandwidth in megabits per second, expressed as a decimal integer.

Values

1 to 999

Kilo-bps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 999

Platforms

All

Context

[Tree] (config>service>vprn>ospf reference-bandwidth)

[Tree] (config>service>vprn>ospf3 reference-bandwidth)

Full Context

configure service vprn ospf reference-bandwidth

configure service vprn ospf3 reference-bandwidth

Description

This command configures the reference bandwidth in kilobits per second (kb/s) that provides the reference for the default costing of interfaces based on their underlying link speed.

The default interface cost is calculated as follows:

cost = reference–bandwidth  bandwidth

The default reference-bandwidth is 100,000,000 kb/s or 100 Gb/s, so the default auto-cost metrics for various link speeds are as follows:

• 10 Mb/s link default cost of 10000

• 100 Mb/s link default cost of 1000

• 1 Gb/s link default cost of 100

• 10 Gb/s link default cost of 10

• 40 Gb/s link default cost of 2

• 100 Gb/s link default cost of 1

• 400 Gb/s link default cost of 1

If the reference bandwidth is configured as 10 Gb (reference-bandwidth 10000000000), a 100 Mb/s interface has a default metric of 100.

When a very large reference bandwidth value is configured, a metric calculation may result in a value higher than the supported protocol cost value. If this occurs, OSPF automatically reverts to the maximum configurable cost metric.

The reference-bandwidth command assigns a default cost to the interface based on the interface speed. To override this default cost on a particular interface, use the metric metric command configured in the config>router>ospf>area>if ip-int-name context.

The no form of this command reverts the reference bandwidth to the default value.

Default

reference-bandwidth 100000000

Parameters

bandwidth-in-kbps

Specifies the reference bandwidth in kilobits per second expressed as a decimal integer.

Values

1 to 4000000000

tbps Tera-bps

Specifies the reference bandwidth in terabits per second expressed as a decimal integer.

Values

1 to 4

gbps Giga-bps

Specifies the reference bandwidth in gigabits per second expressed as a decimal integer.

Values

1 to 999

mbps Mega-bps

Specifies the reference bandwidth in megabits per second expressed as a decimal integer.

Values

1 to 999

kbps Kilo-bps

Specifies the reference bandwidth in kilobits per second expressed as a decimal integer.

Values

1 to 999

Platforms

All

Context

[Tree] (config>router>isis reference-bandwidth)

Full Context

configure router isis reference-bandwidth

Description

This command configures the reference bandwidth that provides the basis of bandwidth relative costing.

To calculate the lowest cost to reach a specific destination, each configured level on each interface must have a cost. If the reference bandwidth is defined, then the cost is calculated using the following formula:

cost = reference-bandwidth  bandwidth

If the reference bandwidth is configured as 10 Gb (reference-bandwidth 10000000000), a 100 Mb/s interface has a default metric of 100. To configure metrics in excess of 63, wide metrics must be deployed (see wide-metrics-only in the config>router>isis context).

When a large reference-bandwidth value is configured, a metric calculation may result in a value higher than the supported protocol cost value. If this occurs, IS-IS automatically reverts to the maximum configurable cost metric.

If the reference bandwidth is not configured, then all interfaces have a default metric of 10.

The no form of this command reverts to the default value.

Default

no reference-bandwidth

Parameters

bandwidth-in-kbps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 18446744073709551615

Zetta-bps

Specifies the reference bandwidth in zettabits per second, expressed as a decimal integer.

Values

1 to 18

Exa-bps

Specifies the reference bandwidth in exabits per second, expressed as a decimal integer.

Values

1 to 999

Peta-bps

Specifies the reference bandwidth in petabits per second, expressed as a decimal integer.

Values

1 to 999

Tera-bps

Specifies the reference bandwidth in terabits per second, expressed as a decimal integer.

Values

1 to 999

Giga-bps

Specifies the reference bandwidth in gigabits per second, expressed as a decimal integer.

Values

1 to 999

Mega-bps

Specifies the reference bandwidth in megabits per second, expressed as a decimal integer.

Values

1 to 999

Kilo-bps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 999

Platforms

All

Context

[Tree] (config>router>ospf3 reference-bandwidth)

[Tree] (config>router>ospf reference-bandwidth)

Full Context

configure router ospf3 reference-bandwidth

configure router ospf reference-bandwidth

Description

This command configures the reference bandwidth in kilobits per second (kb/s) that provides the reference for the default costing of interfaces based on their underlying link speed.

The default interface cost is calculated as follows:

cost = reference-bandwidth  bandwidth

The default reference-bandwidth is 100,000,000 kb/s or 100 Gb/s, the default auto-cost metrics for various link speeds are as follows:

• 10 Mb/s link default cost of 10000

• 100 Mb/s link default cost of 1000

• 1 Gb/s link default cost of 100

• 10 Gb/s link default cost of 10

• 100 Gb/s link default cost of 1

• 400 Gb/s link default cost of 1

If the reference bandwidth is configured as 10 Gb (reference-bandwidth 10000000000), a 100 Mb/s interface has a default metric of 100.

When a very large reference bandwidth value is configured, a metric calculation may result in a value higher than the supported protocol cost value. If this occurs, OSPF automatically reverts to the maximum configurable cost metric.

The reference-bandwidth command assigns a default cost to the interface based on the interface speed. To override this default cost on a particular interface, use the metric metric command configured in the config>router>ospf>area>interface ip-int-name context.

The no form of this command reverts to the default value.

Default

reference-bandwidth 100000000

Parameters

bandwidth-in-kbps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 18446744073709551615

Zetta-bps

Specifies the reference bandwidth in zettabits per second, expressed as a decimal integer.

Values

1 to 18

Exa-bps

Specifies the reference bandwidth in exabits per second, expressed as a decimal integer.

Values

1 to 999

Peta-bps

Specifies the reference bandwidth in petabits per second, expressed as a decimal integer.

Values

1 to 999

Tera-bps

Specifies the reference bandwidth in terabits per second, expressed as a decimal integer.

Values

1 to 999

Giga-bps

Specifies the reference bandwidth in gigabits per second, expressed as a decimal integer.

Values

1 to 999

Mega-bps

Specifies the reference bandwidth in megabits per second, expressed as a decimal integer.

Values

1 to 999

Kilo-bps

Specifies the reference bandwidth in kilobits per second, expressed as a decimal integer.

Values

1 to 999

Platforms

All

Context

[Tree] (config>oam-pm>session>mpls>dm reflect-pad)

Full Context

configure oam-pm session mpls dm reflect-pad

Description

This command enables copying the padding in each MPLS-DM query to the response.

When padding is included in the DM frame the option exists to reflect the padding back in the direction of the source or remove the padding. The removal of the pad-tlv is good practice when using unidirectional tunnels such as RSVP.

This command uses the mandatory TLV type 0, instructing the responder to include the pad TLV from the response. The no form of this command uses the optional TVL type 128, instructing the responder to remove the pad TLV from the response.

The no form of this command disables copying the padding in each MPLS-DM query to the response.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>router>twamp-light reflector)

[Tree] (config>service>vprn>twamp-light reflector)

Full Context

configure router twamp-light reflector

configure service vprn twamp-light reflector

Description

This command configures a TWAMP Light session reflector parameters and to enable TWAMP Light functionality with the no shutdown command. The udp-port keyword and value must be specified with the create keyword. An error message is generated if the specific UDP port is unavailable.

Parameters

udp-port-number

Specifies the UDP port number. A strictly enforced restricted range has been introduced. The TWAMP Light session reflector must be brought in line with this new restriction prior upgrading or rebooting from any previous release if there is an active TWAMP Light session reflector configured. Failure to do so prevents an ISSU operation from proceeding and fails to activate any reflector outside of the enforced range.

Note that in the Two-Way Active Measurement Protocol Light (TWAMP Light) section for a complete description. This parameter is required and specifies the destination udp-port that the session reflector uses to listen for TWAMP Light packets. The session controller launching the TWAMP Light packets must be configured with the same destination UDP port as part of the TWAMP Light test. The IES service uses the destination UDP port that is configured under the router context. Only one UDP port can be configured per unique context.

Values

862, 64364 to 64373

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>bfd>seamless-bfd reflector)

Full Context

configure bfd seamless-bfd reflector

Description

This command specifies the seamless BFD reflector.

The no form of this command removes the context.

Parameters

reflector-name

Specifies the reflector name, up to 32 characters.

Platforms

All

Context

[Tree] (config>router>rsvp>interface refresh-reduction)

Full Context

configure router rsvp interface refresh-reduction

Description

This command enables the use of the RSVP overhead refresh reduction capabilities on this RSVP interface.

When this option is enabled, a node will enable support for three capabilities. It will accept bundles RSVP messages from its peer over this interface, it will attempt to perform reliable RSVP message delivery to its peer, and will use summary refresh messages to refresh path and resv states. The reliable message delivery must be explicitly enabled by the user after refresh reduction is enabled. The other two capabilities are enabled immediately.

A bundle message is intended to reduce overall message handling load. A bundle message consists of a bundle header followed by one or more bundle sub-messages. A sub-message can be any regular RSVP message except another bundle message. A node will only process received bundled RSVP messages but will not generate them.

When reliable message delivery is supported by both the node and its peer over the RSVP interface, an RSVP message is sent with a message_id object. A message_id object can be added to any RSVP message when sent individually or as a sub-message of a bundled message.

if the sender sets the ack_desired flag in the message_id object, the receiver acknowledges the receipt of the RSVP message by piggy-backing a message_ack object to the next RSVP message it sends to its peer. Alternatively, an ACK message can also be used to send the message_ack object. In both cases, one or many message_ack objects could be included in the same message.

The router supports the sending of separate ACK messages only but is capable of processing received message_ack objects piggy-backed to hop-by-hop RSVP messages, such as path and resv.

The router sets the ack_desired flag only in non-refresh RSVP messages and in refresh messages which contain new state information.

A retransmission mechanism based on an exponential backoff timer is supported in order to handle unacknowledged message_id objects. The RSVP message with the same message_id is retransmitted every 2 * rapid-retransmit-time interval of time. The rapid-retransmit-time is referred to as the rapid retransmission interval as it must be smaller than the regular refresh interval configured in the config>router>rsvp>refresh-time context. There is also a maximum number of retransmissions of an unacknowledged RSVP message rapid-retry-limit. The node will stop retransmission of unacknowledged RSVP messages whenever the updated backoff interval exceeds the value of the regular refresh interval or the number of retransmissions reaches the value of the rapid-retry-limit parameter, whichever comes first. These two parameters are configurable globally on a system in the config>router>rsvp context.

Refresh summary consists of sending a summary refresh message containing a message_id list object. The fields of this object are populated each with the value of the message_identifier field in the message_id object of a previously sent individual path or resv message. The summary refresh message is sent every refresh regular interval as configured by the user using the refresh-time command in the config>router>rsvp context. The receiver checks each message_id object against the saved path and resv states. If a match is found, the state is updated as if a regular path or resv refresh message was received from the peer. If a specific message_identifier field does not match, then the node sends a message_id_nack object to the originator of the message.

The above capabilities are referred to collectively as "refresh overhead reduction extensions”. When the refresh-reduction is enabled on an RSVP interface, the node indicates this to its peer by setting a "refresh-reduction-capable” bit in the flags field of the common RSVP header. If both peers of an RSVP interface set this bit, all the above three capabilities can be used. Furthermore, the node monitors the settings of this bit in received RSVP messages from the peer on the interface. As soon as this bit is cleared, the router stops sending summary refresh messages. If a peer did not set the "refresh-reduction-capable” bit, a node does not attempt to send summary refresh messages.

However, if the peer did not set the "refresh-reduction-capable” bit, a node, with refresh reduction enabled and reliable message delivery enabled, will still attempt to perform reliable message delivery with this peer. If the peer does not support the message_id object, it returns an error message "unknown object class”. In this case, the node retransmits the RSVP message without the message_id object and reverts to using this method for future messages destined to this peer. The RSVP Overhead Refresh Reduction is supported with both RSVP P2P LSP path and the S2L path of an RSVP P2MP LSP instance over the same RSVP instance.

The no form of this command reverts to the default value.

Default

no refresh-reduction

Platforms

All

Context

[Tree] (config>router>rsvp refresh-reduction-over-bypass)

Full Context

configure router rsvp refresh-reduction-over-bypass

Description

This command enables the refresh reduction capabilities over all bypass tunnels originating on this PLR node or terminating on this Merge Point (MP) node.

By default, this is disabled. Since a bypass tunnel may merge with the primary LSP path in a node downstream of the next-hop, there is no direct interface between the PLR and the MP node and it is possible the latter will not accept summary refresh messages received over the bypass.

When disabled, the node as a PLR or MP will not set the "Refresh-Reduction-Capable” bit on RSVP messages pertaining to LSP paths tunneled over the bypass. It will also not send Message-ID in RSVP messages. This effectively disables summary refresh.

Default

refresh-reduction-over-bypass disable

Platforms

All

Context

[Tree] (config>router>rsvp refresh-time)

Full Context

configure router rsvp refresh-time

Description

The refresh-time controls the interval (in s), between the successive Path and Resv refresh messages. RSVP declares the session down after it misses keep-multiplier number consecutive refresh messages.

The no form of this command reverts to the default value.

Default

refresh-time 30

Parameters

seconds

The refresh time in s.

Values

1 to 65535

Platforms

All

Context

[Tree] (config>router>origin-validation>rpki-session refresh-time)

Full Context

configure router origin-validation rpki-session refresh-time

Description

This command is used to configure the refresh-time and hold-time intervals that are used for liveness detection of the RPKI-Router session. The refresh-time defaults to 300 seconds and is reset whenever a Reset Query PDU or Serial Query PDU is sent to the cache server. When the timer expires, a new Serial Query PDU is sent with the last known serial number.

The hold-time specifies the length of time in seconds that the session is to be considered UP without any indication that the cache server is alive and reachable. The timer defaults to 600 seconds and must be at least 2x the refresh-time (otherwise the CLI command is not accepted). Reception of any PDU from the cache server resets the hold timer. When the hold-time expires, the session is considered to be DOWN and the stale timer is started.

Default

no refresh-time

Parameters

seconds

Specifies a time in seconds.

Values

30 to 32767

seconds

Specifies a time in seconds.

Values

60 to 65535

Platforms

All

Context

[Tree] (config>service>cpipe>spoke-sdp>control-channel-status refresh-timer)

[Tree] (config>service>epipe>spoke-sdp>control-channel-status refresh-timer)

[Tree] (config>service>vpls>spoke-sdp>control-channel-status refresh-timer)

Full Context

configure service cpipe spoke-sdp control-channel-status refresh-timer

configure service epipe spoke-sdp control-channel-status refresh-timer

configure service vpls spoke-sdp control-channel-status refresh-timer

Description

This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent.

Default

no refresh-timer

Parameters

value

Specifies the refresh timer value, in seconds.

Values

10 to 65535

Default

0 (off)

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service cpipe spoke-sdp control-channel-status refresh-timer

All

• configure service epipe spoke-sdp control-channel-status refresh-timer
• configure service vpls spoke-sdp control-channel-status refresh-timer

Context

[Tree] (config>service>ies>if>spoke-sdp>control-channel-status refresh-timer)

Full Context

configure service ies interface spoke-sdp control-channel-status refresh-timer

Description

This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent.

Default

no refresh-timer

Parameters

value

Specifies the refresh timer value.

Values

10 to 65535 seconds

Default

0 (off)

Platforms

All

Context

[Tree] (config>service>vprn>if>spoke-sdp>control-channel-status refresh-timer)

[Tree] (config>service>vprn>red-if>spoke-sdp>control-channel-status refresh-timer)

Full Context

configure service vprn interface spoke-sdp control-channel-status refresh-timer

configure service vprn redundant-interface spoke-sdp control-channel-status refresh-timer

Description

This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent.

Default

no refresh-timer

Parameters

value

Specifies the refresh timer value.

Values

10 to 65535 seconds

Default

0 (off)

Platforms

All

• configure service vprn interface spoke-sdp control-channel-status refresh-timer

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn redundant-interface spoke-sdp control-channel-status refresh-timer

Context

[Tree] (config>mirror>mirror-dest>remote-src>spoke-sdp>control-channel-status refresh-timer)

[Tree] (config>mirror>mirror-dest>spoke-sdp>control-channel-status refresh-timer)

Full Context

configure mirror mirror-dest remote-source spoke-sdp control-channel-status refresh-timer

configure mirror mirror-dest spoke-sdp control-channel-status refresh-timer

Description

This command configures the refresh timer for control channel status signaling packets. By default, no refresh packets are sent.

Parameters

seconds

Specifies the refresh timer value.

Values

10 to 65535

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (debug>router>pim register)

Full Context

debug router pim register

Description

This command enables debugging for PIM register mechanism.

The no form of this command disables debugging for PIM register mechanism.

Parameters

grp-ip-address

Debugs information associated with the specified PIM register.

Values

multicast group address (ipv4, ipv6)

ip-address

Debugs information associated with the specified PIM register.

Values

source address (ipv4, ipv6)

detail

Debugs detailed register information.

Platforms

All

Context

[Tree] (config>service>vprn>pim>src-address register-message)

[Tree] (config>router>pim>src-address register-message)

Full Context

configure service vprn pim source-address register-message

configure router pim source-address register-message

Description

This command configures the source IP address for PIM register messages. The IP address can be set to any unicast address, regardless of whether it resides on the node. Ensure that the specified IP address is configured on the router as a loopback or interface IP address.

The no form of this command removes the IP address. By default, when no IP address is specified for the PIM instance, the source IP address for register messages is selected by choosing the smallest IP address from available interfaces on the node.

Parameters

ip-address | ipv6-address

Specifies the source IPv4 or IPv6 address, up to 64 characters.

Platforms

All

Context

[Tree] (debug>service>id>mrp registrant-sm)

Full Context

debug service id mrp registrant-sm

Description

This command enables debugging of the registrant state machine.

The no form of this command disables debugging of the registrant state machine.

Platforms

All

Context

[Tree] (config>system>lldp reinit-delay)

Full Context

configure system lldp reinit-delay

Description

This command configures the time before re-initializing LLDP on a port.

The no form of this command reverts to the default value.

Default

no reinit-delay

Parameters

time

Specifies the time, in seconds, before re-initializing LLDP on a port.

Values

1 to 10

Default

2

Platforms

All

Context

[Tree] (config>router>l2tp>group>tunnel>ppp reject-disabled-ncp)

[Tree] (config>service>vprn>l2tp>group>ppp reject-disabled-ncp)

[Tree] (config>router>l2tp>group>ppp reject-disabled-ncp)

[Tree] (config>service>vprn>l2tp>group>tunnel>ppp reject-disabled-ncp)

Full Context

configure router l2tp group tunnel ppp reject-disabled-ncp

configure service vprn l2tp group ppp reject-disabled-ncp

configure router l2tp group ppp reject-disabled-ncp

configure service vprn l2tp group tunnel ppp reject-disabled-ncp

Description

This command forces an LCP Protocol Reject when receiving an IPv6CP Configure Request message whenIPv6 is not configured.

By default, an IPv6CP Configure Request message is silently ignored when IPv6 is not configured.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>ppp-policy reject-disabled-ncp)

Full Context

configure subscriber-mgmt ppp-policy reject-disabled-ncp

Description

This command forces an LCP Protocol Reject when receiving an IPv6CP Configure Request message while IPv6 is not configured or when receiving an IPv4CP Configure Request message and no local IPv4 address is assigned.

By default, an IPv4CP/IPv6CP Configure Request message is silently ignored when IPv4/IPv6 is not configured.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>test-oam>link-meas>template>sw>thr relative)

[Tree] (config>test-oam>link-meas>template>asw>thr relative)

Full Context

configure test-oam link-measurement measurement-template sample-window threshold relative

configure test-oam link-measurement measurement-template aggregate-sample-window threshold relative

Description

This command configures the percentage value of change, positive or negative, compared to the previously reported measurement. If this percentage value is reached in either direction, the new value is conveyed to the routing engine for further handling and stored as the delay measurement last reported. If the percentage value is not configured, this threshold is disabled.

The no form of this command reverts to the default value.

Default

relative 0

Parameters

percent

Specifies the percentage of change.

A value of 0 (zero) indicates no relative thresholding is performed when considering report to the routing engine.

Values

0 to 100

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6 relay)

[Tree] (config>service>ies>sub-if>ipv6>dhcp6 relay)

[Tree] (config>service>vprn>sub-if>ipv6>dhcp6 relay)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6 relay)

Full Context

configure service ies subscriber-interface group-interface ipv6 dhcp6 relay

configure service ies subscriber-interface ipv6 dhcp6 relay

configure service vprn subscriber-interface ipv6 dhcp6 relay

configure service vprn subscriber-interface group-interface ipv6 dhcp6 relay

Description

Commands in this context configure DHCPv6 relay parameters for this interface.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if>dhcp relay-plain-bootp)

[Tree] (config>service>vprn>if>dhcp relay-plain-bootp)

Full Context

configure service ies interface dhcp relay-plain-bootp

configure service vprn interface dhcp relay-plain-bootp

Description

This command enables the relaying of plain BOOTP packets.

The no form of this command disables the relaying of plain BOOTP packets.

Platforms

All

Context

[Tree] (config>router>if>dhcp relay-plain-bootp)

Full Context

configure router interface dhcp relay-plain-bootp

Description

This command enables the relaying of plain BOOTP packets.

The no form of this command disables the relaying of plain BOOTP packets.

Default

no relay-plain-bootp

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if>dhcp relay-proxy)

[Tree] (config>service>ies>if>dhcp relay-proxy)

[Tree] (config>service>ies>sub-if>grp-if>dhcp relay-proxy)

[Tree] (config>service>vprn>sub-if>dhcp relay-proxy)

[Tree] (config>service>vprn>if>dhcp relay-proxy)

[Tree] (config>service>ies>sub-if>dhcp relay-proxy)

Full Context

configure service vprn subscriber-interface group-interface dhcp relay-proxy

configure service ies interface dhcp relay-proxy

configure service ies subscriber-interface group-interface dhcp relay-proxy

configure service vprn subscriber-interface dhcp relay-proxy

configure service vprn interface dhcp relay-proxy

configure service ies subscriber-interface dhcp relay-proxy

Description

This command enables the DHCPv4 relay proxy function on the interface. The command has no effect when no dhcp servers are configured (DHCPv4 relay not configured). By default, unicast DHCPv4 release messages are forwarded transparently.

A relay proxy enhances the relay such that it also relays unicast client DHCPv4 REQUEST messages (lease renewals).

• In the upstream direction, update the source IP address and add the gateway IP address (gi-address) field before sending the message to the intended DHCP server (the message is not broadcasted to all configured DHCP servers.

• In the downstream direction, remove the gi-address and update the destination IP address to the address of the yiaddr (your IP address) field.

The optional release-update-src-ip parameter updates the source IP address of a DHCP RELEASE message with the address used for relayed DHCPv4 messages.

The optional siaddr-override ip-address parameter enables DHCP server IP address hiding towards the client. This parameter requires that lease-populate is enabled on the interface. The DHCP server ip address is required for the address hiding function and is stored in the lease state record. The client interacts with the relay proxy as if it is the DHCP server. In all DHCP messages to the client, the value of following header fields and DHCP options containing the DHCP server IP address is replaced with the configured <ip-address>:

• the "source IP address” field in the IP DHCPv4 packet header

• the "siaddr” field in the DHCPv4 header if not equal to zero in the message received from the server

• the Server Identification option (DHCPv4 option 54) if present in the original server message

• the source IP address field in the IP packet header

DHCP OFFER selection during initial binding is done in the relay-proxy. Only the first DHCP OFFER message is forwarded to the client. Subsequent DHCP OFFER messages from different servers are silently dropped.

Parameters

release-update-src-ip

Updates the source IP address of a DHCP RELEASE message with the address used for relayed DHCPv4 messages.

ip-address

Enables DHCPv4 server address hiding towards the DHCPv4 client and activates DHCPv4 OFFER selection in case multiple DHCP servers are configured. The ip-address can be any local address in the same routing instance. If DHCP relay lease-split is enabled, siaddr-override ip-address has priority over the emulated-server ip-address configured in the proxy-server and is used as the source IP address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface dhcp relay-proxy
• configure service vprn subscriber-interface group-interface dhcp relay-proxy
• configure service ies subscriber-interface group-interface dhcp relay-proxy
• configure service ies subscriber-interface dhcp relay-proxy

All

• configure service ies interface dhcp relay-proxy
• configure service vprn interface dhcp relay-proxy

Context

[Tree] (config>ipsec>ike-policy relay-unsolicited-cfg-attribute)

Full Context

configure ipsec ike-policy relay-unsolicited-cfg-attribute

Description

This command enters relay unsolicited configuration attributes context. With this configuration, the configured attributes returned from source (such as a RADIUS server) will be returned to IKEv2 remote-access tunnel client regardless if the client has requested it in the CFG_REQUEST payload.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes release-reason)

Full Context

configure aaa isa-radius-policy acct-include-attributes release-reason

Description

This command enables the inclusion of the release reason attributes.

The no form of the command excludes release reason attributes.

Default

no release-reason

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>pfcp-association release-timeout)

Full Context

configure subscriber-mgmt pfcp-association release-timeout

Description

This command configures the time to wait to clean up the PFCP association after administratively disabling it and requesting a shutdown to the BNG CPF. If the BNG CPF does not gracefully remove the PFCP association before the timer expires, the full association and all related sessions are forcefully removed.

The no form of this command reverts to the default.

Default

release-timeout 3600

Parameters

seconds

Specifies the wait time, in seconds, for cleanup of the PFCP association.

Values

30 to 3600

Note:

The PFCP protocol encoding does not allow the full range of configured values. The system automatically rounds up the configured value to the nearest value allowed by the protocol. For more information about the protocol encoding, see 3GPP TS 29.244 8.2.78.1.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>rsvp>if>refresh-reduction reliable-delivery)

Full Context

configure router rsvp interface refresh-reduction reliable-delivery

Description

This command enables reliable delivery of RSVP messages over the RSVP interface. When refresh-reduction is enabled on an interface and reliable-delivery is disabled, the router will send a message_id and not set ACK desired in the RSVP messages over the interface. The router does not expect an ACK and but will accept it if received. The node will also accept message ID and reply with an ACK when requested. In this case, if the neighbor set the "refresh-reduction-capable” bit in the flags field of the common RSVP header, the node will enter summary refresh for a specific message_id it sent regardless if it received an ACK or not to this message from the neighbor.

Finally, when 'reliable-delivery’ option is enabled on any interface, RSVP message pacing is disabled on all RSVP interfaces of the system, for example, the user cannot enable the msg-pacing option in the config>router>rsvp context, and error message is returned in CLI. Conversely, when the msg-pacing option is enabled, the user cannot enable the reliable delivery option on any interface on this system. An error message is also generated in CLI after such an attempt.

The no form of this command reverts to the default value.

Default

no reliable-delivery

Platforms

All

Context

[Tree] (admin>certificate reload)

Full Context

admin certificate reload

Description

This command reloads imported certificate or key file or both at the same time. This command is typically used to update certificate or key file without shutting down ipsec-tunnel/ipsec-gw/cert-profile/ca-profile. Note that type cert and type key is deprecated in a future release. Use type cert-key-pair instead. Instead of type cert use type key instead.

• If the new file exists and valid, then for each tunnel using it:

  • If the key matches the certificate, then the new file is downloaded to the MS-ISA to be used the next time. Tunnels currently up are not affected.

  • If the key does not match the certificate:

    • If cert and key configuration is used instead of cert-profile then the tunnel is brought down.

    • If cert-profile is used, then cert-profile is brought down. The next authentication fails while the established tunnels are not affected.

If the new file does not exists or somehow invalid (bad format, does not contain right extension, and so on), then this command will abort.

In the case of type cert-key-pair, if the new file does not exist or is invalid or cert and key do not match, then this command aborts with an error message.

Parameters

type

Specifies what item will be reloaded.

cert

Specifies that a certificate cache will be reloaded.

key

Specifies that a key cache will be reloaded.

cert-key-pair

Specifies that a paired certificate and key cache will be reloaded.

filename

Up to 95 characters.

protocol

Specifies which protocol the certificate will be reloaded for.

Values

ipsec, tls

Platforms

All

Context

[Tree] (config>service>vprn>l2tp>group>l2tpv3 rem-router-id)

Full Context

configure service vprn l2tp group l2tpv3 rem-router-id

Description

This command configures the IP address that should be used within the Remote Router-ID AVP.

The no form of this command removes the configured IP address.

Default

no rem-router-id

Parameters

ip-addr

Specifies an IP address to be used within the Remote Router-ID AVP.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>app-assure>group>policy>aqp>entry>action remark)

Full Context

configure application-assurance group policy app-qos-policy entry action remark

Description

This command configures remark action on flows matching this AQP entry.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>filter>ip-filter>entry>action remark)

[Tree] (config>filter>ipv6-filter>entry>action remark)

[Tree] (config>filter>ip-filter>entry>action>extended-action remark)

[Tree] (config>filter>ipv6-filter>entry>action>extended-action remark)

Full Context

configure filter ip-filter entry action remark

configure filter ipv6-filter entry action remark

configure filter ip-filter entry action extended-action remark

configure filter ipv6-filter entry action extended-action remark

Description

This command enables and configures the remarking of the DiffServ Code Points of packets matching the criteria of the IPv4/IPv6 filter policy entry, in conjunction with a PBR action. Packets are remarked regardless of QoS-based in-profile or out-of-profile classification. QoS-based DSCP remarking is overridden. If the status of the PBR target is tracked and it is down, the extended action will not be executed; otherwise, the extended action will be performed.

Parameters

dscp-name

Specifies the DSCP value to write.

Values

be, ef, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cp9, cs1, cs2, cs3, cs4, cs5, nc1, nc2, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cp11, cp13, cp15, cp17, cp19, cp21, cp23, cp25, cp27, cp29, cp31, cp33, cp35, cp37, cp39, cp41, cp42, cp43, cp44, cp45, cp47, cp49, cp50, cp51, cp52, cp53, cp54, cp55, cp57, cp58, cp59, cp60, cp61, cp62, cp63

Platforms

All

Context

[Tree] (config>qos>network>egress remarking)

Full Context

configure qos network egress remarking

Description

This command remarks both customer traffic and egress network IP interface traffic; VPRN customer traffic is not remarked. The remarking is based on the forwarding class to DSCP and LSP EXP bit mapping defined under the egress node of the network QoS policy.

Normally, packets that ingress on network ports have either the DSCP or, for MPLS packets, LSP EXP bit set by an upstream router. The packets are placed in the appropriate forwarding class based on the DSCP-to-forwarding class mapping or the LSP EXP-to-forwarding class mapping. The DSCP or LSP EXP bits of such packets are not altered as the packets egress this router, unless remarking is enabled.

Remarking can be required if this router is connected to a different DiffServ domain where the DSCP-to-forwarding class mapping is different.

Normally, no remarking is necessary when all router devices are in the same DiffServ domain.

The network QoS policy supports an egress flag that forces remarking of packets that were received on trusted IES and network IP interfaces. This provides the capability of remarking without regard to the ingress state of the IP interface on which a packet was received. The effect of the egress network remark trusted state on each type of ingress IP interface and trust state is listed in Ingress IP Interface Type and Trust State Effect on Egress Network Remarking.

The remark trusted state has no effect on packets received on an ingress VPRN IP interface.

The no form of this command resets the configuration to the default behavior.

Default

no remarking — Remarking disabled in the Network QoS policy.

Parameters

force

Specifies that all IP routed traffic egressing the associated network interface will have its EXP, DSCP, P-bit, and DE bit setting remarked as defined in the associated QoS policy. Only bit fields configured in the QoS policy will be remarked; all others will be left untouched or set based on the default if the fields were not present at ingress.

Platforms

All

Context

[Tree] (config>ipsec>ts-list remote)

Full Context

configure ipsec ts-list remote

Description

Commands in this context configure remote TS-list parameters. The TS-list is the traffic selector of the local system, such as TSi, when the system acts as an IKEv2 responder.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>wlan-gw>tunnel-query remote-address)

Full Context

configure subscriber-mgmt wlan-gw tunnel-query remote-address

Description

This command enables matching only on the tunnel that uses the specified source IP address.

The no form of this command disables matching on a tunnel’s source IP address.

Default

no remote-address

Parameters

ip-address

Specifies the IPv4 or IPv6 remote address.

Values

ipv4-address	a.b.c.d
ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x: [0 to FFFF]H
	d: [0 to 255]D

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>template>vpls-template remote-age)

[Tree] (config>service>vpls remote-age)

Full Context

configure service template vpls-template remote-age

configure service vpls remote-age

Description

This command specifies the aging time for remotely learned MAC addresses in the forwarding database (FDB) for the Virtual Private LAN Service (VPLS) instance.

In a VPLS service, MAC addresses are associated with a Service Access Point (SAP) or with a service destination point (SDP). MACs associated with a SAP are classified as local MACs, and MACs associated with an SDP are remote MACs.

Like in a Layer 2 switch, learned MACs can be aged out if no packets are sourced from the MAC address for a period of time (the aging time). In each VPLS service instance, there are independent aging timers for local learned MAC and remote learned MAC entries in the FDB. The remote-age timer specifies the aging time for remote learned MAC addresses. To reduce the amount of signaling required between switches configure this timer larger than the local-age timer.

The no form of this command returns the remote aging timer to the default value.

Default

remote-age 900

Parameters

seconds

Specifies the aging time for remote MACs expressed in seconds

Values

60 to 86400

Platforms

All

Context

[Tree] (config>service>epipe>bgp-evpn remote-attachment-circuit)

Full Context

configure service epipe bgp-evpn remote-attachment-circuit

Description

This command configures the remote attachment circuit.

The no form of this command disables the context.

Default

no remote-attachment-circuit

Parameters

ac-name

Specifies the name of the remote attachment circuit, up to 32 characters.

endpoint-name

Specifies the name of the endpoint, up to 32 characters.

create

Keyword used to create the remote AC.

Platforms

All

Context

[Tree] (config>service>epipe>sap>cem remote-ecid)

Full Context

configure service epipe sap cem remote-ecid

Description

This command defines the Emulated Circuit Identifiers (ECID) to be used for the remote (destination) end of the circuit emulation service.

Parameters

emulated circuit identifier

Specifies the value to be used as the remote (destination) ECID for the circuit emulation service. Upon CES packet reception, the ECID in the packet will be compared to the configured local-ecid value. These must match for the packet payload to be used for the TDM circuit. The remote-ecid value is inserted into the MEF-8 CES packet to be transmitted.

Values

0 to 1048575

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

Context

[Tree] (config>router>if>ipsec>ipsec-tunnel remote-gateway-address)

Full Context

configure router interface ipsec ipsec-tunnel remote-gateway-address

Description

This command configures the remote IPsec tunnel endpoint address.

Parameters

ip-address

Specifies a remote unicast IPv4 address, up to 64 characters.

ipv6-address

Specifies a remote unicast global unicast IPv6 address, up to 64 characters.

Platforms

VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>host-ident remote-id)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>host-ident remote-id)

Full Context

configure subscriber-mgmt local-user-db ppp host host-identification remote-id

configure subscriber-mgmt local-user-db ipoe host host-identification remote-id

Description

This command specifies the remote ID to match for a host lookup. When the LUDB is accessed using a DHCPv4 server, the SAP-ID is matched against DHCP option 82.

The no form of this command removes the remote ID from the configuration.

Parameters

hex-string

Specifies the hexadecimal format for the remote ID.

Values

0x0 to 0xFFFFFFFF (maximum 254 hex nibbles)

ascii-string

Specifies the string format for the remote ID, up to 255 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>ali remote-id)

Full Context

configure subscriber-mgmt local-user-db ppp host access-loop-information remote-id

Description

This command specifies a remote-id for PPPoE hosts. A remote-id received in PPPoE tags has precedence over the LUDB specified remote ID.

The no form of this command reverts to the default.

Parameters

mac

Specifies MAC address of the PPPoE session as the remote ID.

ASCII string

Specifies the circuit ID as a string, up to 63 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>if>ipv6>dhcp6>option remote-id)

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>option remote-id)

[Tree] (config>service>ies>if>ipv6>dhcp6>option remote-id)

Full Context

configure service vprn interface ipv6 dhcp6-relay option remote-id

configure service vprn subscriber-interface group-interface ipv6 dhcp6 option remote-id

configure service ies interface ipv6 dhcp6-relay option remote-id

Description

This command enables the sending of remote ID option in the DHCPv6 relay packet.

The client DHCP Unique Identifier (DUID) is used as the remote ID.

The no form of this command disables the sending of remote ID option in the DHCPv6 relay packet.

Platforms

All

• configure service vprn interface ipv6 dhcp6-relay option remote-id
• configure service ies interface ipv6 dhcp6-relay option remote-id

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface ipv6 dhcp6 option remote-id

Context

[Tree] (config>service>ies>sub-if>grp-if>dhcp>option remote-id)

[Tree] (config>subscr-mgmt>msap-policy>vpls-only>dhcp>option remote-id)

[Tree] (config>service>ies>if>dhcp>option remote-id)

[Tree] (config>service>vpls>sap>dhcp>option remote-id)

[Tree] (config>service>vprn>if>dhcp>option remote-id)

[Tree] (config>service>vprn>sub-if>grp-if>dhcp>option remote-id)

Full Context

configure service ies subscriber-interface group-interface dhcp option remote-id

configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option remote-id

configure service ies interface dhcp option remote-id

configure service vpls sap dhcp option remote-id

configure service vprn interface dhcp option remote-id

configure service vprn subscriber-interface group-interface dhcp option remote-id

Description

This command specifies what information goes into the remote-id sub-option in the DHCP relay packet.

If disabled, the remote-id sub-option of the DHCP packet is left empty. When the command is configured without any parameters, it equals to the remote-id mac option.

The no form of this command reverts to the default.

Parameters

string

Specifies the remote-id, up to 32 characters.

hex-string

Specifies the hex value of this option.

Values

0x0 to 0xFFFFFFFF...(up to 64 hex nibbles)

mac

Specifies that the MAC address of the remote end is encoded in the sub-option.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface dhcp option remote-id
• configure subscriber-mgmt msap-policy vpls-only-sap-parameters dhcp option remote-id
• configure service ies subscriber-interface group-interface dhcp option remote-id

All

• configure service vprn interface dhcp option remote-id
• configure service vpls sap dhcp option remote-id
• configure service ies interface dhcp option remote-id

Context

[Tree] (config>subscr-mgmt>acct-plcy>include-radius-attribute remote-id)

[Tree] (config>subscr-mgmt>auth-policy>include-radius-attribute remote-id)

Full Context

configure subscriber-mgmt radius-accounting-policy include-radius-attribute remote-id

configure subscriber-mgmt authentication-policy include-radius-attribute remote-id

Description

This command enables the generation of the Broad Band Forum Agent-Remote-Id VSA in RADIUS request messages.

The no form of this command disables the generation of the Broad Band Forum Agent-Remote-Id VSA.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>nasreq>include-avp remote-id)

Full Context

configure subscriber-mgmt diameter-application-policy nasreq include-avp remote-id

Description

This command enables the generation of the Broad Band Forum Agent-Remote-Id Vendor Specific AVP in Diameter NASREQ AAR messages.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (debug>service>id>ppp remote-id)

Full Context

debug service id ppp remote-id

Description

This command enable PPP debug for the specified remote-id.

Multiple remote-id filters can be specified in the same debug command.

Parameters

remote-id

Specifies the remote-id in PADI.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>aaa>isa-radius-plcy>acct-include-attributes remote-id)

[Tree] (config>aaa>isa-radius-plcy>auth-include-attributes remote-id)

Full Context

configure aaa isa-radius-policy acct-include-attributes remote-id

configure aaa isa-radius-policy auth-include-attributes remote-id

Description

This command enables the sending of remote ID option. The client DHCP Unique Identifier (DUID) is used as the remote ID.

The no form of the command disables the sending of remote ID option relay packet.

Default

no remote-id

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if>dhcp>option remote-id)

Full Context

configure router interface dhcp option remote-id

Description

When enabled, the router sends the MAC address of the remote end (typically the DHCP client) in the remote-id suboption of the DHCP packet. This command identifies the host at the other end of the circuit. If disabled, the remote-id suboption of the DHCP packet will be left empty.

The no form of this command returns the system to the default.

Default

no remote-id

Parameters

mac

This keyword specifies the MAC address of the remote end is encoded in the suboption.

string

Specifies the remote ID.

Platforms

All

Context

[Tree] (config>service>vpls>sap>dhcp6>ldra>options remote-id)

Full Context

configure service vpls sap dhcp6 ldra options remote-id

Description

This command configures the information for the remote ID suboption in the DHCP6 LDRA.

The no form of this command reverts to the default.

Default

no remote-id

Parameters

mac

Sets the enterprise number field of the Relay Agent remote ID to 6527 and configures the DHCPv6 client source MAC address as six hexadecimal numbers.

string

Sets the enterprise number field of the Relay-Agent remote ID to 6527 and configures the ASCII-encoded string using up to 32 characters.

Platforms

All

Context

[Tree] (config>service>ies>if>sap>ip-tunnel remote-ip)

Full Context

configure service ies interface sap ip-tunnel remote-ip

Description

This command configures the primary destination IPv4 or IPv6 address to use for an IP tunnel. This configuration applies to the outer IP header of the encapsulated packets. The source address, remote-ip address and backup-remote-ip address of a tunnel must all belong to the same address family (IPv4 or IPv6). When the remote-ip address contains an IPv6 address it must be a global unicast address.

Default

no remote-ip

Parameters

ip-address

An IPv4 address or an IPv6 address.

Platforms

All

Context

[Tree] (config>service>vprn>if>sap>ip-tunnel remote-ip)

Full Context

configure service vprn interface sap ip-tunnel remote-ip

Description

This command sets the primary destination IPv4 address of GRE encapsulated packets associated with a particular GRE tunnel. If this address is reachable in the delivery service (there is a route) then this is the destination IPv4 address of GRE encapsulated packets sent by the delivery service.

The no form of this command deletes the destination address from the GRE tunnel configuration.

Parameters

ip-address

Specifies the destination IPv4 address of the GRE tunnel.

Values

1.0.0.0 to 223.255.255.255

Platforms

All

Context

[Tree] (config>router>ipsec>sec-plcy>entry remote-ip)

[Tree] (config>service>vprn>ipsec>sec-plcy>entry remote-ip)

Full Context

configure router ipsec security-policy entry remote-ip

configure service vprn ipsec security-policy entry remote-ip

Description

This command configures the remote (from the tunnel) IP prefix/mask for the policy parameter entry.

Only one entry is necessary to describe a potential flow. The local-ip and remote-ip commands can be defined only once. The system evaluates:

• the local IP as the source IP when traffic is examined in the direction of the flows from private to public and as the destination IP when traffic flows from public to private

• the remote IP as the source IP when traffic flows public to private and as the destination IP when traffic flows from private to public

Parameters

ip-prefix

Specifies the destination address of the aggregate route in dotted decimal notation.

Values

a.b.c.d (host bits must be 0)

prefix-length 1 to 32

netmask

Specifies the subnet mask in dotted decimal notation.

any

keyword to specify that it can be any address.

Platforms

VSR

• configure router ipsec security-policy entry remote-ip

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn ipsec security-policy entry remote-ip

Context

[Tree] (config>lag>bfd>family remote-ip-address)

Full Context

configure lag bfd family remote-ip-address

Description

This command specifies the IPv4 or IPv6 address of the BFD destination.

The no form of this command removes this address from the configuration.

Default

no remote-ip-address

Parameters

ip-address

Specifies the IP address.

Values

ipv4-address:	a.b.c.d
ipv6-address:	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x:-[0 to FFFF]H
	d: [0 to 255]D

Platforms

All

Context

[Tree] (config>isa>nat-group>inter-chassis-redundancy remote-ip-range-start)

Full Context

configure isa nat-group inter-chassis-redundancy remote-ip-range-start

Description

This command configures the first IPv4 address that is assigned to a first member ISA on the remote node. The remaining member ISAs on the remote node are assigned the consecutive IP addresses starting from the first IP address. These IP addresses are used to communicate between the ISAs on redundant nodes for the purpose of flow synchronization. Traffic from the first local IP address (member ISA), is sent to the first IP address from the remote IP range.

The no form of this command removes the ip-address from the configuration.

Default

no remote-ip-range-start

Parameters

ip-address

Specifies the first IPv4 address, in the a.b.c.d format, from the range assigned to the first member ISA on the remote node.

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>isis>loopfree-alternates remote-lfa)

Full Context

configure router isis loopfree-alternates remote-lfa

Description

This command enables the use of the Remote LFA algorithm in the LFA SPF calculation for this ISIS instance.

The no form of this command disables the use of the Remote LFA algorithm in the LFA SPF calculation for this ISIS instance.

Default

no remote-lfa

Parameters

value

Specifies the integer used to limit the search of candidate P and Q nodes in the remote LFA by setting the maximum IGP cost from the router performing the remote LFA calculation to the candidate P or Q node.

Values

0 to 4294967295

Default

4261412864

Platforms

All

Context

[Tree] (config>router>ospf3>loopfree-alternates remote-lfa)

[Tree] (config>router>ospf>loopfree-alternates remote-lfa)

Full Context

configure router ospf3 loopfree-alternates remote-lfa

configure router ospf loopfree-alternates remote-lfa

Description

This command enables the use of the Remote LFA algorithm in the LFA SPF calculation in this OSPF or OSPF3 instance.

The no form of this command disables the use of the Remote LFA algorithm in the LFA SPF calculation in this OSPF or OSPF3 instance.

Default

no remote-lfa

Parameters

max-pq-cost value

Specifies the integer used to limit the search of candidate P and Q nodes in the remote LFA by setting the maximum IGP cost from the router performing the remote LFA calculation to the candidate P or Q node.

Values

0 to 4294967295

Default

4261412864

Platforms

All

Context

[Tree] (config>port>tdm>ds1 remote-loop-respond)

Full Context

configure port tdm ds1 remote-loop-respond

Description

When enabled, the channel responds to requests for remote loopbacks.

Default

no remote-loop-respond — The port will not respond.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

Context

[Tree] (config>service>epipe>sap>cem remote-mac)

Full Context

configure service epipe sap cem remote-mac

Description

This command defines the destination IEEE MAC address to be used to reach the remote end of the circuit emulation service.

Default

remote-mac 00:00:00:00:00:00

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

Context

[Tree] (config>system>management-interface remote-management)

Full Context

configure system management-interface remote-management

Description

Commands in this context configure the SR OS node to use the remote management service. Configuring remote management enables the SR OS node to report itself to a remote manager service running on a remote server, so that it is included in the dynamic list of available nodes. The manager service streamlines the management of multiple SR OS nodes running different SR OS versions using the same client application providing a similar shell to the MD-CLI.

Platforms

All

Context

[Tree] (debug>system>management-interface remote-management)

Full Context

debug system management-interface remote-management

Description

This command configures the management interface to debug the remote-management managers.

The no form of this command removes the configuration.

Parameters

manager manager-name

Specifies the name of the manager, up to 64 characters. If the parameter is not specified, all configured managers are debugged.

Platforms

All

Context

[Tree] (config>system>rollback remote-max-checkpoints)

Full Context

configure system rollback remote-max-checkpoints

Description

This command configures the maximum number of rollback checkpoint files when the rollback-location is remote (for example, ftp).

Default

no remote-max-checkpoints

Parameters

number of files

Specifies the maximum rollback files saved at a remote location.

Values

1 to 200

Platforms

All

Context

[Tree] (config>eth-cfm>domain>assoc remote-mepid)

Full Context

configure eth-cfm domain association remote-mepid

Description

This command configures the remote MEP ID. Optionally, the operator may configure a unicast MAC address associated with the remote MEP. This unicast value replaces the default Layer 2 class 1 multicast address that is typically associated with ETH-CC packets.

The no form of this command removes the peer information.

Parameters

mep-id

Specifies the peer MEP ID.

Values

1 to 8191

unicast-da

Specifies the unicast MAC destination address.

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx or default

default — Removes the remote MAC unicast address and reverts back to class 1 multicast address.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>oam-pm>session>ethernet remote-mepid)

Full Context

configure oam-pm session ethernet remote-mepid

Description

This command specifies the remote MEP ID as an alternative to the static dest-mac ieee-address. When the remote-mepid option is configured as an alternative to the dest-mac, the domain and association information of the source mep within the session is used to check for a locally-stored unicast MAC address for the peer. The local MEP must be administratively enabled. Peer MEP MAC addresses are learned and maintained by the ETH-CC protocol.

The no form of this command removes this session parameter.

Parameters

mep-id

Specifies the remote MEP ID of the peer within the association.

Values

1 to 8191

Platforms

All

Context

[Tree] (config>service>vprn>l2tp>group>tunnel remote-name)

[Tree] (config>router>l2tp>group>tunnel remote-name)

Full Context

configure service vprn l2tp group tunnel remote-name

configure router l2tp group tunnel remote-name

Description

This command configures a string to be compared to the host name used by the tunnel peer during the authentication phase of tunnel establishment.

Default

no remote-name

Parameters

host-name

Specifies a remote host name for the tunnel, up to 64 characters.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>ies>if remote-proxy-arp)

[Tree] (config>service>vprn>sub-if>grp-if remote-proxy-arp)

[Tree] (config>service>vprn>if remote-proxy-arp)

[Tree] (config>service>ies>sub-if>grp-if remote-proxy-arp)

[Tree] (config>service>vprn>nw-if remote-proxy-arp)

Full Context

configure service ies interface remote-proxy-arp

configure service vprn subscriber-interface group-interface remote-proxy-arp

configure service vprn interface remote-proxy-arp

configure service ies subscriber-interface group-interface remote-proxy-arp

configure service vprn nw-if remote-proxy-arp

Description

This command enables remote proxy ARP on the interface.

Remote proxy ARP is similar to proxy ARP. It allows the router to answer an ARP request on an interface for a subnet that is not provisioned on that interface. This allows the router to forward to the other subnet on behalf of the requester. To distinguish remote proxy ARP from local proxy ARP, local proxy ARP performs a similar function but only when the requested IP is on the receiving interface.

The no form of this command reverts to the default.

Platforms

All

• configure service vprn interface remote-proxy-arp
• configure service ies interface remote-proxy-arp

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn subscriber-interface group-interface remote-proxy-arp
• configure service ies subscriber-interface group-interface remote-proxy-arp

Context

[Tree] (config>subscr-mgmt>git>ipv4 remote-proxy-arp)

Full Context

configure subscriber-mgmt group-interface-template ipv4 remote-proxy-arp

Description

This command enables remote proxy ARP on the interface.

Remote proxy ARP is similar to proxy ARP. It allows the router to answer an ARP request on an interface for a subnet that is not provisioned on that interface. This allows the router to forward to the other subnet on behalf of the requester. To distinguish remote proxy ARP from local proxy ARP, local proxy ARP performs a similar function but only when the requested IP address is on the receiving interface.

The no form of this command disables remote proxy ARP on the interface.

Default

no remote-proxy-arp

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>if remote-proxy-arp)

Full Context

configure router interface remote-proxy-arp

Description

This command enables remote proxy ARP on the interface.

Default

no remote-proxy-arp

Platforms

All

Context

[Tree] (config>service>vprn>aaa remote-servers)

Full Context

configure service vprn aaa remote-servers

Description

Commands in this context configure AAA remote servers on the VPRN.

Platforms

All

Context

[Tree] (config>mirror>mirror-dest remote-source)

Full Context

configure mirror mirror-dest remote-source

Description

This command is used on a destination router in a remote mirroring solution. The mirroring (packet copy) is performed on the source router and sent via an SDP to the destination router. Remote mirroring requires remote source configuration on the destination router.

Remote mirroring allows a destination router to terminate SDPs from multiple remote source routers. This allows consolidation of packet sniffers or analyzers at a single or small set of points in a network (for example, a sniffer or analyze farm, or lawful interception gateway).

A remote-source entry must be configured on the destination router for each source router from which mirrored traffic is being sent via SDPs.

A mirror destination service that is configured for a destination router must not be configured as for a source router.

The emote source configuration is not applicable when routable LI encapsulation is being used on the mirror source router. The remote source configuration is only used when a source router is sending mirrored traffic to a destination router via SDPs.

Two types of remote-source entries can be configured:

• far end

• spoke SDP

Certain remote source types are applicable with certain SDP types. For descriptions of the command usage in the mirror-dest context, see the far-end and spoke-sdp commands.

The no form of this command removes all remote-source entries.

Platforms

All

Context

[Tree] (config>router>ipsec>sec-plcy>entry remote-v6-ip)

[Tree] (config>service>vprn>ipsec>sec-plcy>entry remote-v6-ip)

Full Context

configure router ipsec security-policy entry remote-v6-ip

configure service vprn ipsec security-policy entry remote-v6-ip

Description

This command specifies the remote v6 prefix for the security-policy entry.

Parameters

ipv6-prefix/prefix-length

Specifies the local v6 prefix and length.

Values

ipv6-address/prefix: ipv6-address	x:x:x:x:x:x:x:x (eight 16-bit pieces)
	x:x:x:x:x:x:d.d.d.d
	x [0 to FFFF]H
	d [0 to 255]D
	host bits must be 0
	:: not allowed
	prefix-length [1 to 28]

any

A keyword to specify that any address can be used.

Platforms

VSR

• configure router ipsec security-policy entry remote-v6-ip

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn ipsec security-policy entry remote-v6-ip

Context

[Tree] (config>service>epipe>bgp-vpws remote-ve-name)

Full Context

configure service epipe bgp-vpws remote-ve-name

Description

This command creates or edits a remote-ve-name. A single remote-ve-name can be created per BGP VPWS instance if the service is single-homed or uses a single pseudowire to connect to a pair of dual-homed systems. When the service requires active/standby pseudowires to be created to remote dual-homed systems then two remote-ve-names must be configured.

This context defines the remote PE to which a pseudowire will be signaled.

remote-ve-name commands can be added even if bgp-vpws is not shutdown.

The no form of this command removes the configured remote-ve-name from the bgp vpws node. It can be used when the BGP VPWS status is either shutdown or "no shutdown”.

Parameters

name

Specifies a site name up to 32 characters in length.

Platforms

All

Context

[Tree] (config>service>vprn>bgp>attribute-set remove)

Full Context

configure service vprn bgp attribute-set remove

Description

This command configures BGP to ignore and silently discard ATTR_SETs in BGP routes received from PE-CE peers of the VPRN. The discarded ATTR_SETs do not affect BGP best-path selection in the VPRN, and they do not appear in the VPN-IP routes that result from the VRF export of the BGP routes. Nokia recommends enabling this command in most deployments.

The no form of this command configures BGP to ignore ATTR_SETs in BGP routes received from PE-CE peers of the VPRN without discarding them. This allows the ATTR_SETs to propagate between CE devices connected to the VPRN and to other PE devices when the BGP routes are exported as VPN-IP routes.

Default

no remove

Platforms

All

Context

[Tree] (config>subscr-mgmt>sla-profile>host-limits remove-oldest)

Full Context

configure subscriber-mgmt sla-profile host-limits remove-oldest

Description

This command removes the oldest subscriber host when the host limit is reached.

The no form of this command maintains the oldest subscriber host when the host limit is reached.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>bgp-prng-plcy remove-private)

Full Context

configure subscriber-mgmt bgp-peering-policy remove-private

Description

This command allows private AS numbers to be removed from the AS path before advertising them to BGP peers.

The OS software recognizes the set of AS numbers that are defined by IANA as private. These are AS numbers in the range 64512 through 65535, inclusive.

The no form of this command used at the global level reverts to default value.

Private AS numbers are included in the AS path attribute.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vprn>bgp>group remove-private)

[Tree] (config>service>vprn>bgp>group>neighbor remove-private)

[Tree] (config>service>vprn>bgp remove-private)

Full Context

configure service vprn bgp group remove-private

configure service vprn bgp group neighbor remove-private

configure service vprn bgp remove-private

Description

When this command is configured private AS numbers are removed or replaced when they are found inside the AS path of BGP routes advertised to peers within the scope of the command.

The set of AS numbers that are defined by IANA as private are in the range of 64512 to 65534, and 4200000000 to 4294967294, inclusive. In SR OS, this command also removes ASN 65535 and ASN 4294967295, which are reserved values.

The no form of this command (at the BGP instance level) implements the default behavior, private AS numbers are allowed without restriction or modification in routes advertised to peers.

Default

no remove-private

Parameters

limited

This keyword instructs BGP to process private ASNs only up to the first public ASN encountered. Private ASNs beyond that first public AS will not be stripped or replaced.

skip-peer-as

This keyword instructs BGP to not strip or replace a private ASN from the AS-Path if that ASN is the same as the BGP peer AS number.

replace

When this keyword is configured, private ASNs are not stripped. Each occurrence is replaced by the ASN of the advertising BGP router (the ASN the router advertised to its peer in its OPEN message). When the replace keyword is not configured, private ASNs are stripped, subject to influence by the other keyword options. This generally results in a shortening of AS_PATH length.

Platforms

All

Context

[Tree] (config>router>bgp>group>neighbor remove-private)

[Tree] (config>router>bgp remove-private)

[Tree] (config>router>bgp>group remove-private)

Full Context

configure router bgp group neighbor remove-private

configure router bgp remove-private

configure router bgp group remove-private

Description

When this command is configured private AS numbers are removed or replaced when they are found inside the AS path of BGP routes advertised to peers within the scope of the command.

The set of AS numbers that are defined by IANA as private are in the range of 64512 to 65534, and 4200000000 to 4294967294, inclusive. In SR OS, this command also removes ASN 65535 and ASN 4294967295, which are reserved values.

The no form of this command (at the BGP instance level) implements the default behavior, private AS numbers are allowed without restriction or modification in routes advertised to peers.

Default

no remove-private

Parameters

limited

This keyword instructs BGP to process private ASNs only up to the first public ASN encountered. Private ASNs beyond that first public AS will not be stripped or replaced.

skip-peer-as

This keyword instructs BGP to not strip or replace a private ASN from the AS-Path if that ASN is the same as the BGP peer AS number.

replace

When this keyword is configured, private ASNs are not stripped. Each occurrence is replaced by the ASN of the advertising BGP router (the ASN the router advertised to its peer in its OPEN message). When the replace keyword is not configured, private ASNs are stripped, subject to influence by the other keyword options. This generally results in a shortening of AS_PATH length.

Platforms

All

Context

[Tree] (admin>certificate>est renew)

Full Context

admin certificate est renew

Description

This command renews an imported certificate (specified by the cert cert-filename) with a Certificate Authority (CA) using the EST protocol specified by the est-profile name, with an imported private key specified the key parameter. The key can be either the key of the certificate to be renewed or a new key.

The authentication between system and EST server is specified by the est-profile.

The hash-alg hash-alorithm parameter is used to generate the CSR (Certificate Signing Request) in the EST request message.

Parameters

name

Specifies EST profile name, up to 32 characters

cert-filename

Specifies the certificate file name, up to 95 characters

key-filename

Specifies the file name of a key, up to 95 characters

hash-algorithm

Specifies the hash algorithm to be used in a certificate request.

Values

sha1, sha224, sha256, sha384, sha512

output-cert-filename

Specifies the output cert file name, up to 200 characters

validate-cert-chain

Specifies that the the system validates the certificate chain of the result certificate before importing it

force

Specifies the system to overwrite the existing file with same output output-cert-filename

Platforms

All

Context

[Tree] (config>service>vprn>sub-if>grp-if>ipv6>dhcp6>proxy renew-timer)

[Tree] (config>service>ies>sub-if>grp-if>ipv6>dhcp6>proxy-server renew-timer)

[Tree] (config>subscr-mgmt>loc-user-db>ppp>host>ipv6-lease-times renew-timer)

[Tree] (config>router>dhcp6>server>pool>prefix renew-timer)

[Tree] (config>subscr-mgmt>loc-user-db>ipoe>host>ipv6-lease-times renew-timer)

[Tree] (config>service>vprn>dhcp6>server>pool>prefix renew-timer)

Full Context

configure service vprn subscriber-interface group-interface ipv6 dhcp6 proxy-server renew-timer

configure service ies subscriber-interface group-interface ipv6 dhcp6 proxy-server renew-timer

configure subscriber-mgmt local-user-db ppp host ipv6-lease-times renew-timer

configure router dhcp6 local-dhcp-server pool prefix renew-timer

configure subscriber-mgmt local-user-db ipoe host ipv6-lease-times renew-timer

configure service vprn dhcp6 local-dhcp-server pool prefix renew-timer

Description

This command configures the lease renew time (T1) via LUDB.

The T1 is the time at which the client contacts the addressing authority to extend the lifetimes of the DHCPv6 leases (addresses or prefixes). T1 is a time duration relative to the current time expressed in units of seconds.

The IP addressing authority controls the time at which the client contacts the addressing authority to extend the lifetimes on assigned addresses through the T1 and T2 parameters assigned to an IA. At time T1 for an IA, the client initiates a Renew/Reply message exchange to extend the lifetimes on any addresses in the IA. The client includes an IA option with all addresses currently assigned to the IA in its Renew message. Recommended values for T1 and T2 are .5 and .8 times the shortest preferred lifetime of the addresses in the IA that the addressing authority is willing to extend, respectively.

The configured renew timer should always be smaller than or equal to the rebind timer.

The T1 and T2 are carried in the IPv6 address option that is within the IA.

The no form of this command reverts to the default.

Default

renew-timer min 30

Parameters

renew-timer

Specifies the preferred lifetime.

Values

days days	0 to 7
hrs hours	0 to 23
min minutes	0 to 59
sec seconds	0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>router>dhcp6>server>defaults renew-timer)

Full Context

configure router dhcp6 local-dhcp-server defaults renew-timer

Description

This command configures the default renew timer.

The no form of this command reverts to the default.

Default

renew-timer min 30

Parameters

renew-timer

Specifies the timer after which the lease is renewed.

Values

days:	0 to 7
hours:	0 to 23
minutes:	0 to 59
seconds	0 to 59

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>mac-notification renotify)

Full Context

configure service vpls mac-notification renotify

Description

This command controls the periodic interval at which sets of MAC notification messages are sent. At each expiration of the renotify timer, a new burst of notification messages is sent, specifically <count> frames at <interval> deci-seconds.

Default

no renotify

Parameters

value

Specifies the time interval between re-notification, in seconds

Values

240 to 840

Platforms

All

Context

[Tree] (config>service>mrp>mrp-policy renum)

Full Context

configure service mrp mrp-policy renum

Description

This command renumbers existing MRP policy entries to properly sequence policy entries. This may be required in some cases since the implementation exits when the first match is found and executes the actions according to the accompanying action command. This requires that entries be sequenced correctly from most to least explicit.

Parameters

src-entry-id

Specifies the entry number of an existing entry.

Values

1 to 65535

new-entry-id

Specifies the new entry number to be assigned to the old entry. If the new entry exists, an error message is generated.

Values

1 to 65535

Platforms

All

Context

[Tree] (config>qos>sap-egress>ip-criteria renum)

[Tree] (config>qos>sap-egress>ipv6-criteria renum)

[Tree] (config>qos>sap-ingress>ipv6-criteria renum)

[Tree] (config>qos>sap-ingress>mac-criteria renum)

[Tree] (config>qos>sap-ingress>ip-criteria renum)

Full Context

configure qos sap-egress ip-criteria renum

configure qos sap-egress ipv6-criteria renum

configure qos sap-ingress ipv6-criteria renum

configure qos sap-ingress mac-criteria renum

configure qos sap-ingress ip-criteria renum

Description

This command renumbers existing QoS policy criteria entries to properly sequence policy entries.

This can be required in some cases since the router exits when the first match is found and executes the actions in accordance with the accompanying action command. This requires that entries be sequenced correctly from most to least explicit.

Parameters

old-entry-id

Enter the entry number of an existing entry.

Values

1 to 65535

new-entry-id

Enter the new entry number to be assigned to the old entry.

Values

1 to 65535

Platforms

All

Context

[Tree] (config>qos>network>egress>ipv6-criteria renum)

[Tree] (config>qos>network>ingress>ipv6-criteria renum)

[Tree] (config>qos>network>egress>ip-criteria renum)

[Tree] (config>qos>network>ingress>ip-criteria renum)

Full Context

configure qos network egress ipv6-criteria renum

configure qos network ingress ipv6-criteria renum

configure qos network egress ip-criteria renum

configure qos network ingress ip-criteria renum

Description

This command renumbers existing QoS policy criteria entries to properly sequence policy entries.

This can be required in some cases since the router exits when the first match is found and executes the actions in accordance with the accompanying action command. This requires that entries be sequenced correctly from most to least explicit.

Parameters

old-entry-number

Enter the entry number of an existing entry.

Values

1 to 65535

new-entry-number

Enter the new entry number to be assigned to the old entry.

Values

1 to 65535

Platforms

All

Context

[Tree] (config>filter>mac-filter renum)

[Tree] (config>filter>ip-exception renum)

[Tree] (config>filter>ipv6-exception renum)

[Tree] (config>filter>ipv6-filter renum)

[Tree] (config>filter>ip-filter renum)

Full Context

configure filter mac-filter renum

configure filter ip-exception renum

configure filter ipv6-exception renum

configure filter ipv6-filter renum

configure filter ip-filter renum

Description

This command renumbers existing MAC, IPv4/IPv6, IP exception filter, or IPv6 exception filter entries to properly sequence filter entries.

This may be required in some cases since the OS exits when the first match is found and executes the actions according to the accompanying action command. This requires that entries be sequenced correctly from most to least explicit.

Parameters

old-entry-id

Specifies the entry number of an existing entry, as a decimal integer.

Values

1 to 2097151

new-entry-id

Specifies the new entry-number to be assigned to the old entry, as a decimal integer.

Values

1 to 2097151

Platforms

All

• configure filter mac-filter renum
• configure filter ip-filter renum
• configure filter ipv6-filter renum

VSR

• configure filter ip-exception renum
• configure filter ipv6-exception renum

Context

[Tree] (config>system>security>mgmt-access-filter>ipv6-filter renum)

[Tree] (config>system>security>mgmt-access-filter>ip-filter renum)

[Tree] (config>system>security>mgmt-access-filter>mac-filter renum)

Full Context

configure system security management-access-filter ipv6-filter renum

configure system security management-access-filter ip-filter renum

configure system security management-access-filter mac-filter renum

Description

This command renumbers existing management access filter entries for an IP(v4), IPv6, or MAC filter to re-sequence filter entries.

The exits on the first match found and executes the actions in accordance with the accompanying action command. This may require some entries to be re-numbered differently from most to least explicit.

Parameters

old-entry-number

Specifies the entry number of the existing entry.

Values

1 to 9999

new-entry-number

Specifies the new entry number that will replace the old entry number.

Values

1 to 9999

Platforms

All

Context

[Tree] (config>sys>sec>cpm>ip-filter renum)

[Tree] (config>sys>sec>cpm>mac-filter renum)

[Tree] (config>sys>sec>cpm>ipv6-filter renum)

Full Context

configure system security cpm-filter ip-filter renum

configure system security cpm-filter mac-filter renum

configure system security cpm-filter ipv6-filter renum

Description

This command renumbers existing IP(IPv4), IPv6, or MAC filter entries to re-sequence filter entries.

This may be required in some cases since the OS exits when the first match is found and execute the actions according to the accompanying action command. This requires that entries be sequenced correctly from most to least explicit.

Parameters

old-entry-id

Specifies the entry number of an existing entry.

Values

1 to 6144 for ip-filter and ipv6-filter

1 to 2048 for mac-filter

new-entry-id

Specifies the new entry number to be assigned to the old entry.

Values

1 to 6144 for ip-filter and ipv6-filter

1 to 2048 for mac-filter

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>security>profile renum)

Full Context

configure system security profile renum

Description

This command renumbers profile entries to re-sequence the entries.

Since the OS exits when the first match is found and executes the actions according to accompanying action command, re-numbering is useful to rearrange the entries from most explicit to least explicit.

Parameters

old-entry-number

Enter the entry number of an existing entry.

Values

1 to 9999

new-entry-number

Enter the new entry number.

Values

1 to 9999

Platforms

All

Context

[Tree] (config>router>policy-options>policy-statement renumber)

Full Context

configure router policy-options policy-statement renumber

Description

This command allows the operator to renumber the existing entry ID to a new entry ID. When performing the renumbering action, the two entry IDs must be different. The existing (from) entry-id must exist. The new (to) entry-id must not exist.

Renumbering is not saved in the configuration because it is a performing action.

Parameters

from entry-id

Specifies the existing entry ID to be renumbered.

Values

1 to 4294967295

to entry-id

Specifies the new entry ID to be assigned.

Values

1 to 4294967295

Platforms

All

Context

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video reorder-audio)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video reorder-audio)

Full Context

configure mcast-management multicast-info-policy bundle video reorder-audio

configure mcast-management multicast-info-policy bundle channel video reorder-audio

Description

This command configures the time, in milliseconds, by which the audio packets are reordered in the ad stream.

Configuring this parameter depends on what is configured on the A Server and the GOP sizes of the network stream. Typically, this configuration should match the A Server configuration.

The no form of the command removes the time value from the configuration.

Default

no reorder-audio

Parameters

time

Specifies the audio reorder time, in milliseconds.

Values

100 to 1000

Platforms

7450 ESS, 7750 SR, 7750 SR-s

Context

[Tree] (file repair)

Full Context

file repair

Description

This command checks a compact flash device for errors and repairs any errors found.

Parameters

cflash-id

Specifies the compact flash slot ID to be repaired. When a specific cflash-id is specified, that drive is repaired. If no flash-id is specified, the drive referred to by the current working directory is assumed. If a slot number is not specified, the active CPM is assumed.

Values

cf1:, cf1-A:, cf1-B:, cf2:, cf2-A:, cf2-B:, cf3:, cf3-A:, cf3-B:

Default

the current compact flash device

Platforms

All

Context

[Tree] (config>test-oam>sath>svc-test>svc-stream>frm-payl>patt repeat)

Full Context

configure test-oam service-activation-testhead service-test service-stream frame-payload data-pattern repeat

Description

This command configures the data pattern padding bytes for the frames launched for the service stream.

The specified data pattern value is repeated as many times as required to fill the remaining length of the payload for the highest level of the specified PDU. If only the Ethernet and ETH-CFM information is added, the data pattern is included in the data TLV of the ETH-CFM frame.

Default

repeat 0

Parameters

padding

Specifies the data pattern to populate the payload data.

Values

0 to 4294967295

Platforms

7450 ESS, 7750 SR, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>security>password>complexity-rules repeated-characters)

Full Context

configure system security password complexity-rules repeated-characters

Description

The number of times a characters can be repeated consecutively.

The no form of this command resets to default.

Default

no repeated-characters

Parameters

count

Specifies the minimum count of consecutively repeated characters.

Values

2 to 8

Platforms

All

Context

[Tree] (candidate replace)

Full Context

candidate replace

Description

This command displays the specified line (a single line only) and allows it to be changed.

Parameters

line

Indicates which line to replace starting at the point indicated by the following options.

Values

line, offset, first, edit-point, last
	line	absolute line number
	offset	relative line number to current edit point. Prefixed with '+' or '-'
	first	keyword - first line
	edit-point	keyword - current edit point
	last	keyword - last line that is not 'exit'

Platforms

All

Context

[Tree] (config>router>l2tp replace-result-code)

[Tree] (config>service>vprn>l2tp replace-result-code)

Full Context

configure router l2tp replace-result-code

configure service vprn l2tp replace-result-code

Description

This command replaces CDN Result-Code 4, 5 and 6 on LNS with the Result Code 2. This is needed for interoperability with some implementation of LAC which only takes action based on CDN Result-Code 2 while ignoring CDN Result-Code 4, 5 and 6.

Default

no replace-result-code

Parameters

code

Specifies the L2TP Result codes that need to be replaced. Up to three codes can be specified.

Values

cdn-tmp-no-facilities — CDN Result-Code 4 on LNS are replaced with the result code 2 before it is sent to LAC.

cdn-prem-no-facilities — CDN Result-Code 5 on LNS are replaced with the result code 2 before it is sent to LAC.

cdn-inv-dest — CDN Result-Code 6 on LNS are replaced with the result code 2 before it is sent to LAC.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>macsec>connectivity-association replay-protection)

Full Context

configure macsec connectivity-association replay-protection

Description

Specifies the size of the replay protection window.

This command must be configured to force packet discard when it has detected a packet that is not within the replay-window-size.

When replay protection is enabled, the sequence of the ID number of the received packets are checked. If the packet arrives out of sequence and the difference between the packet numbers exceeds the replay window size, the packet is counted by the receiving port and then discarded. For example, if the replay protection window size is set to five and a packet assigned the ID of 1006 arrives on the receiving link immediately after the packet assigned the ID of 1000, the packet that is assigned the ID of 1006 is counted and discarded because it falls outside the parameters of the replay window size.

Replay protection is especially useful for fighting man-in-the-middle attacks. A packet that is replayed by a man-in-the-middle attacker on the Ethernet link will arrive on the receiving link out of sequence, so replay protection helps ensure the replayed packet is dropped instead of forwarded through the network.

Replay protection should not be enabled in cases where packets are expected to arrive out of order.

Default

no replay-protection

Platforms

All

Context

[Tree] (config>service>ies>if>ipsec>ipsec-tunnel replay-window)

[Tree] (config>service>vprn>if>sap>ipsec-tunnel replay-window)

[Tree] (config>ipsec>tnl-temp replay-window)

[Tree] (config>service>vprn>if>ipsec>ipsec-tunnel replay-window)

[Tree] (config>ipsec>trans-mode-prof replay-window)

Full Context

configure service ies interface ipsec ipsec-tunnel replay-window

configure service vprn interface sap ipsec-tunnel replay-window

configure ipsec tunnel-template replay-window

configure service vprn interface ipsec ipsec-tunnel replay-window

configure ipsec ipsec-transport-mode-profile replay-window

Description

This command specifies the size of the anti-replay window. The anti-replay window protocol further secures IPsec against an entity that can inject a recorded message in a message stream from a source to a destination computer on the Internet.

Default

no replay-window

Parameters

replay-window-size

Specifies the size of the SA anti-replay window.

Values

32, 64, 128, 256, 512

Platforms

VSR

• configure service ies interface ipsec ipsec-tunnel replay-window
• configure service vprn interface ipsec ipsec-tunnel replay-window

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

• configure service vprn interface sap ipsec-tunnel replay-window
• configure ipsec tunnel-template replay-window
• configure ipsec ipsec-transport-mode-profile replay-window

Context

[Tree] (config>macsec>connectivity-association replay-window-size)

Full Context

configure macsec connectivity-association replay-window-size

Description

This command specifies the size of the replay protection window.

This command must be configured to enable replay protection. When replay protection is enabled, the sequence of the ID number of received packets are checked. If the packet arrives out of sequence and the difference between the packet numbers exceeds the replay protection window size, the packet is dropped by the receiving port. For example, if the replay protection window size is set to five and a packet assigned the ID of 1006 arrives on the receiving link immediately after the packet assigned the ID of 1000, the packet that is assigned the ID of 1006 is dropped because it falls outside the parameters of the replay protection window.

Replay protection is especially useful for fighting man-in-the-middle attacks. A packet that is replayed by a man-in-the-middle attacker on the Ethernet link will arrive on the receiving link out of sequence, so replay protection helps ensure the replayed packet is dropped instead of forwarded through the network.

Replay protection should not be enabled in cases where packets are expected to arrive out of order.

When the number-of-packets variable is set to 0, all packets that arrive out-of-order are dropped.

The no form of this command reverts to the default value.

Default

replay-window-size 0

Parameters

number-of-packets

Specifies the window for which the packets can arrive out of order.

Values

0 to 4294967294

Platforms

All

Context

[Tree] (config>router>p2mp-sr-tree replication-segment)

Full Context

configure router p2mp-sr-tree replication-segment

Description

This command creates a P2MP SR tree replication segment entry for the P2MP LSP.

The no form of this command deletes the replication segment entry.

Parameters

policy-name

Specifies the P2MP policy name, up to 32 characters, associated with the forwarding instructions contained in the replication segment.

Platforms

All

Context

[Tree] (config>router>p2mp-sr-tree>replication-segment>sr-mpls>downstream-nodes replication-sid)

Full Context

configure router p2mp-sr-tree replication-segment segment-routing-mpls downstream-nodes replication-sid

Description

This command configures the replication SID or a SID list for the next hop of the P2MP SR tree replication segment.

When a SID list is configured, the replication SID is at the bottom of the stack and the unicast node or the adjacency SID is at the top of the stack. The SID at the top of the stack must be configured first in the list and the replication SID at the bottom of the list must be configured last in the list.

The no form of this command removes the replication SID.

Default

no replication-sid

Parameters

label

Specifies the label of the replication SID; up to a maximum of 11 labels.

Values

3, 16 to 1048575, 4294967295

Platforms

All

Context

[Tree] (config>isa>nat-group>inter-chassis-redundancy replication-threshold)

Full Context

configure isa nat-group inter-chassis-redundancy replication-threshold

Description

This command configures the minimum duration of the flow that needs to be met before it is synchronized to the standby node. This way, flow synchronization and statefulness in a multi-chassis environment are limited only to long-lived flows.

The no form of this command reverts to the default values.

Default

replication-threshold 20

Parameters

seconds

Specifies the minimum flow existence time before it is synchronized.

Values

0 to 300

Platforms

7450 ESS, 7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>ppp-policy reply-on-padt)

Full Context

configure subscriber-mgmt ppp-policy reply-on-padt

Description

This command enables replying to PPPoE Active Discovery Terminate (PADT) packets. Some of the PPPoE clients expect reply on PADT message before the context of the session is cleared up. To support such client, a command enabling reply to PADT is provided.

The no form of this command reverts to the default.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>port>tdm>e3 report-alarm)

[Tree] (config>port>tdm>ds3 report-alarm)

Full Context

configure port tdm e3 report-alarm

configure port tdm ds3 report-alarm

Description

This command enables logging of DS-3 and E-3 alarms for a DS-3/E-3 port or channel.

The no form of this command disables logging of the specified alarms.

Parameters

ais

Reports alarm indication signal errors. When configured, ais alarms are not raised and cleared.

Default

ais alarms are issued

los

Reports loss of signal errors. When configured, los traps are not raised and cleared.

Default

los traps are issued

oof

Reports out-of-frame errors. When configured, oof alarms are not raised and cleared.

Default

oof alarms are not issued

rai

Reports resource availability indicator events. When configured, rai events are not raised and cleared.

Default

rai alarms are not issued

looped

Reports looped packets errors.

Default

looped alarms are not issued

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

Context

[Tree] (config>port>ethernet report-alarm)

Full Context

configure port ethernet report-alarm

Description

This command specifies when and if to generate alarms and alarm clear notifications for this port.

Parameters

signal-fail

Reports an Ethernet signal lost alarm.

remote

Reports remote faults.

local

Reports local faults.

no-frame-lock

Reports a 'not locked on the Ethernet framing sequence' alarm.

high-ber

Reports High Bit Error Rate.

no-block-lock

Reports 40G/100G PCS Lanes Not Block Locked.

no-am-lock

Reports 40G/100G PCS Alignment Marker Loss of Lock.

duplicate-lane

Reports 40G/100G PCS Duplicate Lane Marker.

Platforms

All

Context

[Tree] (config>port>sonet-sdh report-alarm)

Full Context

configure port sonet-sdh report-alarm

Description

This command enables logging of SONET (SDH) line and section alarms for a SONET-SDH port. Only line and section alarms can be configured in the SONET/SDH context, for path alarms see the sonet-sdh>path context.

The no form of this command disables logging of the specified alarms.

This command is supported on TDM satellites.

Parameters

loc

Reports a loss of clock which causes the operational state of the port to be shut down.

Default

loc alarms are issued

lais

Reports line alarm indication signal errors. When configured, lais alarms are raised and cleared.

Default

lais alarms are not issued

lrdi

Reports line remote defect indication errors. LRDI's are caused by remote LOF, LOC, LOS. When configured, lrdi alarms are raised and cleared.

Default

lrdi alarms are issued

ss1f

Reports section synchronization failure which is detected when the S1 byte is not consistent for 8 consecutive frames. When configured, ss1f alarms are raised and cleared.

Default

ss1f alarms are not issued

lb2er-sd

Reports line signal degradation BER (bit interleaved parity) errors. Use the threshold command to set the error rate(s) that when crossed determine signal degradation and signal failure. When configured, lb2er-sd alarms are raised and cleared.

Default

lb2er-sd alarms are not issued

lb2er-sf

Reports line signal failure BER errors. Use the threshold command to set the error rate(s) that when crossed determine signal degradation and signal failure. When configured, lb2er-sf alarms are raised and cleared.

Default

lb2er-sf alarms are issued

slof

Reports section loss of frame errors. When configured, slof alarms are raised and cleared.

Default

slof alarms are issued

slos

Reports a section loss of signal error on the transmit side. When configured, slos alarms are raised and cleared.

Default

slos alarms are issued

lrei

Reports a line error condition raised by the remote as a result of b1 errors received from this node. When configured, lrei traps are raised but not cleared.

Default

lrei traps are not issued

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>sonet-sdh>path report-alarm)

Full Context

configure port sonet-sdh path report-alarm

Description

This command enables logging of SONET (SDH) path alarms for a SONET-SDH port. Only path alarms can be configured in the channel context.

The no form of this command disables logging of the specified alarms.

Parameters

pais

Reports path alarm indication signal errors. When configured, pais alarms are raised and cleared.

Default

pais alarms are not issued

plop

Reports path loss of pointer (per tributary) errors. When configured, plop traps are raised but not cleared.

Default

plop traps are issued

prdi

Reports path remote defect indication errors. When configured, prdi alarms are raised and cleared.

Default

prdi alarms are not issued

pplm

Reports a path payload mismatch, as a result the channel will be brought down. When configured, pplm traps are raised but not cleared.

Default

pplm traps are issued

prei

Reports a path error condition raised by the remote as a result of b3 errors received from this node. When configured, prei traps are raised but not cleared.

Default

prei traps are not issued

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>tdm>e1 report-alarm)

[Tree] (config>port>tdm>ds1 report-alarm)

Full Context

configure port tdm e1 report-alarm

configure port tdm ds1 report-alarm

Description

This command enables logging of DS-1/DS-3 or E-1/E-3 alarms for DS-1/DS-3 or E-1/E-3 ports or channels.

The no form of this command disables logging of the specified alarms.

Parameters

ais

Reports alarm indication signal errors. When configured, ais alarms are not raised and cleared.

Default

ais alarms are issued

los

Reports loss of signal errors. When configured, los traps are not raised and cleared.

Default

los traps are issued.

oof

Reports out-of-frame errors. When configured, oof alarms are not raised and cleared.

Default

oof alarms are not issued.

rai

Reports resource availability indicator events. When configured, rai events are not raised and cleared.

Default

rai alarms are not issued

looped

Reports looped packets errors.

looped alarms are not issuedlof

Reports loss of frame errors. When configured, lof traps are not raised and cleared.

Default

lof traps are issued

ber-sd

Specifies the BER that specifies signal degradation.

ber-sf

Specifies the BER that specifies signal failure.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

Context

[Tree] (config>service>epipe>sap>cem report-alarm)

[Tree] (config>service>cpipe>sap>cem report-alarm)

Full Context

configure service epipe sap cem report-alarm

configure service cpipe sap cem report-alarm

Description

This command indicates the type of CEM SAP alarm.

The no form of this command removes the parameter from the configuration.

Default

On: stray, malformed, pktloss and overrun

Off: rpktloss, rfault, rrdi

Parameters

stray

Reports the reception of packets not destined for this CES circuit.

malformed

Reports the reception of packet not properly formatted as CES packets.

pktloss

Reports the lack of reception of CES packets.

overrun

Reports the reception of too many CES packets resulting in a overrun of the receive jitter buffer.

underrun

Reports the reception of too few CES packets resulting in a overrun of the receive jitter buffer.

rpktloss

Reports that the remote peer is currently in packet loss status.

rfault

Reports that the remote TDM interface is currently not in service.

rrdi

Reports that the remote TDM interface is currently in RDI status.

Platforms

7450 ESS, 7750 SR-7/12/12e, 7750 SR-a, 7750 SR-e

• configure service epipe sap cem report-alarm

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service cpipe sap cem report-alarm

Context

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>video>analyzer>alarms report-alarm)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>channel>source-override>video>analyzer>alarms report-alarm)

[Tree] (config>mcast-mgmt>mcast-info-plcy>bundle>video>analyzer>alarms report-alarm)

Full Context

configure mcast-management multicast-info-policy bundle channel video analyzer alarms report-alarm

configure mcast-management multicast-info-policy bundle channel source-override video analyzer alarms report-alarm

configure mcast-management multicast-info-policy bundle video analyzer alarms report-alarm

Description

This command configures the type of alarm to monitor and raise through SNMP. The severity of alarms increases from TNC, to QoS, and then to POA. For example, if QoS alarms are configured, the analyzer only raises alarms and events related to QoS. The analyzer may raise alarms for POA events if they occur, but alarms for TNC are not sent.

Default

no report-alarm

Parameters

severity

Keyword to configure the type of alarm.

tnc

Specifies to monitor and raise alarms for TNC events.

qos

Specifies to monitor and raise alarms for QoS events.

poa

Specifies to monitor and raise alarms for POA events.

Platforms

7450 ESS, 7750 SR, 7750 SR-s

Context

[Tree] (config>port>dwdm>coherent report-alarms)

Full Context

configure port dwdm coherent report-alarms

Description

This command configures the alarms that will be reported for the coherent module.

Default

modflt mod netrx nettx hosttx

Parameters

modflt

Reports module fault alarm.

mod

Reports module alarm.

netrx

Reports network (optical side) receive alarm.

nettx

Reports network (optical side) transmit alarm.

hosttx

Reports host (electrical side) transmit alarm.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>port>otu report-alarms)

Full Context

configure port otu report-alarms

Description

This command enables OTU alarms. Specify specific alarms to add to the list of reported alarms.

The no form of this command disables OTU alarm reporting.

Default

loc, los, lof, lom, otu-ber-sf, otu-bdi, fec-sf

Parameters

alarms

Refer to Alarm Descriptions for alarm descriptions.

Table 2. Alarm Descriptions

Alarm	Description
loc	Loss of clock.
lof	Loss of OTU framing.
lom	Loss of Multi-frame.
los	Loss of signal transitions on the data.
otu-ais	OTU Alarm Indication Signal (all 1s, overwrites all OTU overhead, even framing bytes).
otu-ber-sf	SM Signal Fail (based on BPI8).
otu-ber-sd	SM Signal Degrade (based on BPI8).
otu-bdi	SM Backward defect indication.
otu-tim	SM Trace Id Mismatch.
otu-iae	SM Incoming Alignment Error.
otu-biae	SM Backward Incoming Alignment Error.
fec-sf	Signal Fail (based on FEC corrected bits).
fec-sd	Signal Degrade (based on FEC corrected bits).
fec-fail	FEC Mode mismatch (EFEC-GFEC) or High Uncorrectable rate (>10E-2).
fec-uncorr	One or More Uncorrectable FEC errors.
odu-ais	ODU Alarm Indication Signal.
odu-oci	ODU Open connection Indication.
odu-lck	ODU Locked.
odu-bdi	PM Backward Defect indication.
odu-tim	PM Trace Id Mismatch.
opu-plm	OPU PSI Payload Type Mismatch.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gx report-ip-address-event)

Full Context

configure subscriber-mgmt diameter-application-policy gx report-ip-address-event

Description

This command enables triggered CCR-u messages based on IP address allocation or de-allocation for the subscriber host.

If the requests for both IP address families (IPv4 and IPv6) arrive at approximately the same time, a single CCR-i is sent containing the IP addresses from both address families, IPv4 and IPv6 (NA, PD, or SLAAC). When the requests for IP addresses are not nearly simultaneous, the CCR-i contains only the IP address that was allocated first (the one that triggered the session creation). The request for the second IP address family, depending on configuration, triggers an additional CCR-u that will carry the IP address allocation update to the PCRF along with the UE_IP_ADDRESS_ALLOCATE (18) event. The CCR-u content mirrors the content of the CCR-i with the exception of already allocated IP address(es).

When this command is disabled, IP address-triggered CCR-u messages are not sent.

The no form of this command disables the command.

Default

report-ip-address-event

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>bmp>station report-local-routes)

Full Context

configure bmp station report-local-routes

Description

This command enables local route reporting to the BMP monitoring station.

The no form of this command disables the local route reporting.

Platforms

All

Context

[Tree] (config>router>pcep>pcc report-path-constraints)

Full Context

configure router pcep pcc report-path-constraints

Description

This command enables the inclusion of LSP path constraints in the PCE report messages sent from the PCC to a PCE.

In order for the PCE to know about the original constraints for an LSP which is delegated, but for which there is no prior state in its LSP database, such as if no PCReq message was sent for the same PLSP-ID, the following proprietary behavior is observed:

• PCC appends a duplicate of each of the LSPA, METRIC, and BANDWIDTH objects in the PCRpt message. The only difference between two objects of the same type is that the P-flag is set in the common header of the duplicate object to indicate that it is a mandatory object for processing by PCE.

• The value of the metric or bandwidth in the duplicate object contains the original constraint value, while the first object contains the operational value. This is applicable to hop metrics in the METRIC and BANDWIDTH objects only. The SR OS PCC does not support configuring a boundary on the path computation IGP or TE metrics.

• The path computation on the PCE must use the first set of objects when updating a path if the PCRpt contained a single set. If the PCRpt contained a duplicate set, PCE path computation must use the constraints in the duplicate set.

The no form of the command disables the above behavior in case of interoperability issues with third-party PCE implementations.

Default

report-path-constraints

Platforms

All

Context

[Tree] (config>subscr-mgmt>sla-prof>egress report-rate)

[Tree] (config>subscr-mgmt>sla-prof>ingress report-rate)

Full Context

configure subscriber-mgmt sla-profile egress report-rate

configure subscriber-mgmt sla-profile ingress report-rate

Description

This command configures the source for Tx and Rx connect speeds in AVP 38 (Rx Connect Speed) and AVP 24 (Tx Connect Speed) of an L2TP session established on a LAC.

The no form of this command reverts to the default.

Parameters

agg-rate-limit

Specifies that the rate (egress only) is taken from:

1. the agg-rate RADIUS override (RADIUS VSA "Alc-Subscriber-QoS-Override” in a RADIUS Access-Accept message) if present

2. the configured agg-rate-limit in the config>subscr-mgmt>sub-prof>egr context

3. fall back to the default (no report-rate)

scheduler-name

Specifies the rate taken from the scheduler scheduler-name up to 32 characters. If the scheduler scheduler-name is not present in the scheduler-policy configured in the config>subscr-mgmt>sub-prof>egr context, fall back to the default (no report-rate).

pppoe-actual-rate

Specifies rates taken from the DSL Line characteristics PPPoE tags (Actual Data Rate Upstream/Downstream) if present; otherwise fall back to the default (no report-rate).

policer-id

Specifies the rate taken from the policer with the specified ID.

Values

1 to 63

rfc5515-actual-rate

Puts the same value as the transmitted Actual-Data-Rate-Upstream AVP in the Rx-Connect-Speed AVP, and the same value as the transmitted Actual-Data-Rate-Downstream AVP in the Tx-Connect-Speed AVP

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>igmp-snooping report-src-ip)

Full Context

configure service vpls igmp-snooping report-src-ip

Description

This command configures the source IPv4 address used when generating IGMP reports. According the IGMPv3 standard, a zero source address is allowed in sending IGMP reports. However, for interoperability with some multicast routers, the source IP address of IGMP group reports can be configured using this command.

Default

report-src-ip 0.0.0.0

Parameters

ip-address

Specifies the source IPv4 address in transmitted IGMP reports.

Values

a.b.c.d

Platforms

All

Context

[Tree] (config>service>vpls>mld-snooping report-src-ip)

Full Context

configure service vpls mld-snooping report-src-ip

Description

This command configures the source IPv6 address used when generating MLD reports. A zero source address is allowed in sending MLD reports. However, for interoperability with some multicast routers, the source IP address of MLD reports can be configured using this command.

Default

report-src-ip 0:0:0:0:0:0:0:0

Parameters

ipv6-address

Specifies the source IPv6 address in transmitted MLD reports.

Values

x:x:x:x:x:x:x:x (eight 16-bit pieces)

Platforms

All

Context

[Tree] (config>subscr-mgmt>gtp>peer-profile report-wlan-location)

Full Context

configure subscriber-mgmt gtp peer-profile report-wlan-location

Description

This command enables reporting the WLAN location or cellular location of the UE in the signaling interface (S2a or Gn) between the WLAN GW and the mobile gateway (PGW or GGSN).

The no form of this command disables location reporting.

Default

no report-wlan-location

Platforms

7750 SR, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>diam-appl-plcy>gy>efh>interim-c reporting)

Full Context

configure subscriber-mgmt diameter-application-policy gy extended-failure-handling interim-credit reporting

Description

This command enables reporting of the used interim credit for each rating group when a new Diameter Gy session is successfully established with the Online Charging Server (OCS). When enabled, the used interim credit report includes:

• the unreported used credit assigned via the initial Diameter Gy session when Extended Failure Handling (EFH) became active

• the used interim credits during EFH

• the used credits assigned via the new established Diameter Gy session

The no form of this command disables interim credit reporting. Only credit assigned via the new established Diameter Gy session is reported.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>test-oam>link-meas>template reporting)

Full Context

configure test-oam link-measurement measurement-template reporting

Description

This command specifies whether values that reach a configured threshold are reported to the routing engine. Reaching a configured sample-window or aggregate-sample-window indicates a value of interest.

When this command is disabled, values reaching thresholds are not reported to the routing engine. In both enabled and disabled cases, the sample-window and aggregate-sample-window information and computed values are stored on the node until overwriting occurs.

Default

reporting

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>li>x-interfaces>x3>timeouts request)

[Tree] (config>li>x-interfaces>x2>timeouts request)

Full Context

configure li x-interfaces x3 timeouts request

configure li x-interfaces x2 timeouts request

Description

This command configures the X2 and X3 keep-alive timeout.

Parameters

seconds

Specifies the maximum time to wait for a LIC reply to a request. The system retries up to three more times, and if no reply is received, the system initiates a connection release and logs the failure event.

Values

5 to 30

Default

5

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

Context

[Tree] (config>system>security>tacplus request-format)

[Tree] (config>service>vprn>aaa>rmt-srv>tacplus request-format)

Full Context

configure system security tacplus request-format

configure service vprn aaa remote-servers tacplus request-format

Description

Commands in this context configure access operations that are sent to the TACACS+ server during authorization.

Platforms

All

Context

[Tree] (config>aaa>l2tp-accounting-policy request-script-policy)

[Tree] (config>aaa>radius-srv-plcy request-script-policy)

Full Context

configure aaa l2tp-accounting-policy request-script-policy

configure aaa radius-server-policy request-script-policy

Description

This command configures a RADIUS script policy to modify Access-Request.

The no form of this command removes the policy-name from the configuration.

Parameters

script-policy

Specifies the name of the Python script used to modify Access-Request messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>subscr-mgmt>auth-plcy request-script-policy)

Full Context

configure subscriber-mgmt authentication-policy request-script-policy

Description

This command configures the RADIUS script policy used to change the RADIUS attributes of the outgoing Access-Request messages.

The no form of this command removes the policy name from the configuration.

Parameters

policy-name

Specifies the name of the Python script to modify Access-Request messages.

Platforms

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, VSR

Context

[Tree] (config>service>vpls>spoke-sdp>control-channel-status request-timer)

[Tree] (config>service>epipe>spoke-sdp>control-channel-status request-timer)

[Tree] (config>service>cpipe>spoke-sdp>control-channel-status request-timer)

Full Context

configure service vpls spoke-sdp control-channel-status request-timer

configure service epipe spoke-sdp control-channel-status request-timer

configure service cpipe spoke-sdp control-channel-status request-timer

Description

This command configures the control channel status request mechanism. When it is configured, control channel status request procedures are used. These augment the procedures for control channel status messaging from RFC 6478. This command cannot be used with a non-zero refresh-timer value.

Parameters

timer1

Specifies the interval, in seconds, at which pseudowire status messages, including a reliable delivery TLV with the "request” bit set, are sent.

Values

10 to 65535

timer2

specifies the timeout interval, in seconds, if no response to a pseudowire status request is received. This parameter must be configured. A value of zero (0) disables retries.

Values

0, 3 to 60

multiplier

If a requesting node does not receive a valid response to a pseudowire status request within a number of seconds equal to the retry timer multiplied by this multiplier, then it will assume the pseudowire is down. This parameter is optional.

Values

3 to 20

Platforms

All

• configure service vpls spoke-sdp control-channel-status request-timer
• configure service epipe spoke-sdp control-channel-status request-timer

7450 ESS, 7750 SR, 7750 SR-a, 7750 SR-e, 7750 SR-s, 7950 XRS

• configure service cpipe spoke-sdp control-channel-status request-timer